[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.121' (ECDSA) to the list of known hosts. 2020/07/16 01:48:08 fuzzer started 2020/07/16 01:48:08 dialing manager at 10.128.0.26:42743 2020/07/16 01:48:08 syscalls: 3201 2020/07/16 01:48:08 code coverage: enabled 2020/07/16 01:48:08 comparison tracing: enabled 2020/07/16 01:48:08 extra coverage: enabled 2020/07/16 01:48:08 setuid sandbox: enabled 2020/07/16 01:48:08 namespace sandbox: enabled 2020/07/16 01:48:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/16 01:48:08 fault injection: enabled 2020/07/16 01:48:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/16 01:48:08 net packet injection: enabled 2020/07/16 01:48:08 net device setup: enabled 2020/07/16 01:48:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/16 01:48:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/16 01:48:08 USB emulation: enabled 01:50:54 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[], 0x878) syzkaller login: [ 229.403253][ T6821] IPVS: ftp: loaded support on port[0] = 21 [ 229.534011][ T6821] chnl_net:caif_netlink_parms(): no params data found 01:50:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)={0x14, 0x42, 0x201, 0x0, 0x0, "", [@generic='\x00']}, 0x14}], 0x1}, 0x0) [ 229.628003][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.645307][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.653569][ T6821] device bridge_slave_0 entered promiscuous mode [ 229.667592][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.674853][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.684074][ T6821] device bridge_slave_1 entered promiscuous mode [ 229.709820][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.721754][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.752141][ T6821] team0: Port device team_slave_0 added [ 229.760810][ T6821] team0: Port device team_slave_1 added [ 229.786159][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.793136][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.820459][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.834969][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.842821][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.869602][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.898200][ T6969] IPVS: ftp: loaded support on port[0] = 21 01:50:55 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)={0x0, 0x13a}, 0x18) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0xd24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000000240)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x40, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) r4 = accept4(r2, &(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@null, @rose, @netrom, @rose, @default, @default, @rose, @netrom]}, &(0x7f0000000040)=0x80, 0x80800) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140)=0xffffe123, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}], 0x1c) [ 229.937685][ T6821] device hsr_slave_0 entered promiscuous mode [ 229.965422][ T6821] device hsr_slave_1 entered promiscuous mode [ 230.255879][ T7021] IPVS: ftp: loaded support on port[0] = 21 [ 230.343641][ T6969] chnl_net:caif_netlink_parms(): no params data found 01:50:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 230.423594][ T6821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.496606][ T6821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.587621][ T6821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.641794][ T6821] netdevsim netdevsim0 netdevsim3: renamed from eth3 01:50:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000053c0)=ANY=[@ANYBLOB="1c0000003600ff07000000000000000003"], 0x1c}], 0x1}, 0x0) [ 230.762387][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.774352][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.783668][ T6969] device bridge_slave_0 entered promiscuous mode [ 230.804389][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.827191][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.847709][ T6969] device bridge_slave_1 entered promiscuous mode [ 230.886014][ T7160] IPVS: ftp: loaded support on port[0] = 21 [ 230.997472][ T6969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.019507][ T6969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.044131][ T7021] chnl_net:caif_netlink_parms(): no params data found 01:50:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x200001d4}}, 0x0) [ 231.193462][ T6969] team0: Port device team_slave_0 added [ 231.229673][ T6969] team0: Port device team_slave_1 added [ 231.256147][ T7293] IPVS: ftp: loaded support on port[0] = 21 [ 231.346501][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.353597][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.366793][ T7021] device bridge_slave_0 entered promiscuous mode [ 231.377009][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.394856][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.421918][ T6969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.437376][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.444344][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.470729][ T6969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.501185][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.508501][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.517079][ T7021] device bridge_slave_1 entered promiscuous mode [ 231.567103][ T7021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.577683][ T7364] IPVS: ftp: loaded support on port[0] = 21 [ 231.582246][ T7021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.660045][ T6969] device hsr_slave_0 entered promiscuous mode [ 231.725466][ T6969] device hsr_slave_1 entered promiscuous mode [ 231.764999][ T6969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.772807][ T6969] Cannot create hsr debugfs directory [ 231.803091][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 231.833281][ T7021] team0: Port device team_slave_0 added [ 231.843422][ T7021] team0: Port device team_slave_1 added [ 231.936599][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.943576][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.970726][ T7021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.022277][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.029809][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.058159][ T7021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.188675][ T7021] device hsr_slave_0 entered promiscuous mode [ 232.255377][ T7021] device hsr_slave_1 entered promiscuous mode [ 232.314981][ T7021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.322557][ T7021] Cannot create hsr debugfs directory [ 232.352131][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 232.419372][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.432564][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.442065][ T7160] device bridge_slave_0 entered promiscuous mode [ 232.471166][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.479206][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.488749][ T7160] device bridge_slave_1 entered promiscuous mode [ 232.674822][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.684039][ T7364] chnl_net:caif_netlink_parms(): no params data found [ 232.705993][ T6969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.741137][ T6969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.814119][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.838198][ T6969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.876237][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.883341][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.892727][ T7293] device bridge_slave_0 entered promiscuous mode [ 232.933262][ T6969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.997172][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.004263][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.014941][ T7293] device bridge_slave_1 entered promiscuous mode [ 233.041124][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.056995][ T7160] team0: Port device team_slave_0 added [ 233.103050][ T7160] team0: Port device team_slave_1 added [ 233.140219][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.179983][ T7021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.240115][ T7021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.298785][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.318171][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.326286][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.336142][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.343220][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.352349][ T7364] device bridge_slave_0 entered promiscuous mode [ 233.363937][ T7021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.426311][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.433292][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.460568][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.474168][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.482237][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.489597][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.498242][ T7364] device bridge_slave_1 entered promiscuous mode [ 233.506915][ T7021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.567998][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.575349][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.602601][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.646124][ T7293] team0: Port device team_slave_0 added [ 233.653033][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.663090][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.672670][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.680049][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.702597][ T7293] team0: Port device team_slave_1 added [ 233.710355][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.724652][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.746001][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.757747][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.767172][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.777970][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.785106][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.792671][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.802087][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.881980][ T7160] device hsr_slave_0 entered promiscuous mode [ 233.934859][ T7160] device hsr_slave_1 entered promiscuous mode [ 233.985670][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.993261][ T7160] Cannot create hsr debugfs directory [ 234.029305][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.041414][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.052212][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.077092][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.084060][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.111357][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.130720][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.137731][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.173476][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.194788][ T7364] team0: Port device team_slave_0 added [ 234.200667][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.217214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.247289][ T7364] team0: Port device team_slave_1 added [ 234.275513][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.284169][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.293296][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.302658][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.379867][ T7293] device hsr_slave_0 entered promiscuous mode [ 234.435620][ T7293] device hsr_slave_1 entered promiscuous mode [ 234.494473][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.502034][ T7293] Cannot create hsr debugfs directory [ 234.515870][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.525247][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.532232][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.559249][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.621102][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.628868][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.657579][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.735730][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.743197][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.772868][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.817039][ T7364] device hsr_slave_0 entered promiscuous mode [ 234.864685][ T7364] device hsr_slave_1 entered promiscuous mode [ 234.904514][ T7364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.912116][ T7364] Cannot create hsr debugfs directory [ 235.047131][ T7160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.136431][ T7160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.180722][ T7160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.220416][ T7160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.275849][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.285904][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.368252][ T6969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.389224][ T6821] device veth0_vlan entered promiscuous mode [ 235.442965][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.452044][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.470477][ T6821] device veth1_vlan entered promiscuous mode [ 235.503646][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.512635][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.525599][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.551256][ T6969] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.559334][ T7293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.602848][ T7293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.674397][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.682606][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.703063][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.722187][ T7021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.744879][ T7293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.776155][ T7293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.837389][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.846331][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.855669][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.862756][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.870884][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.880600][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.896016][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.904616][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.913341][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.922582][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.929705][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.940738][ T6821] device veth0_macvtap entered promiscuous mode [ 235.955414][ T6821] device veth1_macvtap entered promiscuous mode [ 236.008732][ T7364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.049413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.060087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.068404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.077901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.087000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.095407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.103020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.112237][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.122824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.136196][ T7021] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.156924][ T7364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.217665][ T7364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.290624][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.301277][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.318450][ T7364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.352383][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.362476][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.372814][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.382065][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.391311][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.399855][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.406972][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.415244][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.423714][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.464810][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.477869][ T6969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.491490][ T6969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.499788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.508751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.517579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.526155][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.535866][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.544559][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.551628][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.559515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.568670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.577655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.589883][ T6821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.601506][ T6821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.611212][ T6821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.621183][ T6821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.654138][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.747461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.757500][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.767419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.775970][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.783508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.804699][ T6969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.882348][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.903387][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.929057][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.939236][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.952062][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.960785][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.032891][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.084602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.093360][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 01:51:02 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x304, &(0x7f0000000040)="b90503600040f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 237.175423][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.185526][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.196478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.205726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.230750][ T7021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.273022][ T6969] device veth0_vlan entered promiscuous mode [ 237.304129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.312060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.361776][ T6969] device veth1_vlan entered promiscuous mode [ 237.430722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.451445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.462424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.519338][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.548119][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.559885][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 01:51:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) [ 237.569783][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.597260][ T7021] device veth0_vlan entered promiscuous mode [ 237.606212][ T8156] splice read not supported for file /uinput (pid: 8156 comm: syz-executor.0) 01:51:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d0001"], 0x28}], 0x1}, 0x0) [ 237.632671][ T6969] device veth0_macvtap entered promiscuous mode [ 237.641046][ T8158] splice read not supported for file /uinput (pid: 8158 comm: syz-executor.0) [ 237.672546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.690614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.702303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.716123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.725724][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.734918][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.752952][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 01:51:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa442}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) [ 237.789650][ T6969] device veth1_macvtap entered promiscuous mode [ 237.823427][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.832142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.847779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.877458][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.917715][ T7021] device veth1_vlan entered promiscuous mode [ 237.950495][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 01:51:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa442}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) [ 237.960195][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.978757][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.988851][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.995998][ T7152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.006813][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.019556][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.032320][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.039464][ T7152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.059476][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.072411][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.086223][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_0 01:51:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}}, 0x0) [ 238.115206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.123362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.135776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.147700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.157892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.181979][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.221633][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.238957][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 01:51:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}}, 0x0) [ 238.265824][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.284929][ T6969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.318341][ T6969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.344181][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.359903][ T7021] device veth0_macvtap entered promiscuous mode [ 238.374631][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.386236][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.401147][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.411115][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.420632][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.437740][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.447327][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.472790][ T6969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.481627][ T6969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.495815][ T6969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.506598][ T6969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.522083][ T7021] device veth1_macvtap entered promiscuous mode [ 238.537911][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.546195][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.555342][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.565229][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.574145][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.582835][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.590006][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.597850][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.606810][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.615599][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.624647][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.632932][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.640037][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.647908][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.657472][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.668632][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.684071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.711806][ T7160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.723297][ T7160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.739123][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.752570][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.762565][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.774435][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.782025][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.790594][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.805165][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.815682][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.826798][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.837490][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.849321][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.957894][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.967939][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.977297][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.986490][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.995790][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.011223][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.024475][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.034658][ T7021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.045174][ T7021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.056874][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.153563][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.182521][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.192897][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.200031][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.215469][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.224874][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.235885][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.245875][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.256862][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.270376][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.279748][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.295928][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.306591][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.313730][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.322491][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.336614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.350230][ T7021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.360747][ T7021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.370444][ T7021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.379253][ T7021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.394402][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.402860][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 01:51:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) [ 239.430543][ T7293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.448691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.458866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.547903][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.601003][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.626054][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.637568][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.654992][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.662384][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.781152][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.810212][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.827796][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 01:51:04 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'wg2\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}) syncfs(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400eeff16000101000000000000000004000000"], 0x14}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x86200, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 239.856724][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.901043][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.914396][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.982026][ T7364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.023956][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.032654][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.058073][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.072020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.096754][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.116290][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.124721][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.166241][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.182163][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.193106][ T7160] device veth0_vlan entered promiscuous mode [ 240.226180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.237090][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.245175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.254229][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.268014][ T7160] device veth1_vlan entered promiscuous mode [ 240.286794][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.327602][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.342705][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.351687][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.364126][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.374905][ T7293] device veth0_vlan entered promiscuous mode [ 240.393954][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.411823][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.420501][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.429488][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.441944][ T7160] device veth0_macvtap entered promiscuous mode [ 240.453627][ T7293] device veth1_vlan entered promiscuous mode [ 240.474818][ T7160] device veth1_macvtap entered promiscuous mode [ 240.520570][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.532170][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.545447][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.558340][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.569063][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.579976][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.591423][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.610795][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.619804][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.620343][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 240.628756][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.645757][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.654638][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.666839][ T7293] device veth0_macvtap entered promiscuous mode [ 240.681097][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.692900][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.709287][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.721414][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.735443][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.747464][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.761002][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.781570][ T7160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.791047][ T7160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.801491][ T7160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.811049][ T7160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.827612][ T7293] device veth1_macvtap entered promiscuous mode [ 240.836029][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.844685][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.852657][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.862247][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.871306][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.880482][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.971192][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.981988][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.994561][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.005700][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.017083][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.028064][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.038281][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.050652][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.062255][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.077996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.090632][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.100528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.109207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.169995][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.189426][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.200254][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.211514][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.222140][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.233026][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.244473][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.256058][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.257425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 241.270609][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.286416][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.295242][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.302834][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.311929][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.339873][ T7364] device veth0_vlan entered promiscuous mode [ 241.356664][ T7293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.383262][ T7293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.391971][ T7293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.401171][ T7293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.437885][ T7364] device veth1_vlan entered promiscuous mode 01:51:06 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 241.602403][ C0] hrtimer: interrupt took 42738 ns [ 241.633284][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.641965][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.642822][ T8221] NFS: mount program didn't pass any mount data [ 241.714378][ T7364] device veth0_macvtap entered promiscuous mode [ 241.750772][ T7364] device veth1_macvtap entered promiscuous mode [ 241.751545][ T8226] NFS: mount program didn't pass any mount data 01:51:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 241.757878][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.858902][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.877258][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.904324][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.906649][ T8230] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 241.939018][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.959897][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.970421][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.989219][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 242.017567][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.039369][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 242.068700][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.088703][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.103390][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.111622][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.124683][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.135432][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.166448][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.190927][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.201805][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.213777][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.225708][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.237033][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.248114][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.259464][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.270972][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.281977][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.297156][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.311917][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.321812][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.338199][ T7364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.347081][ T7364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.357591][ T7364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.366427][ T7364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 01:51:08 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 01:51:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f00000010c0)={0x0, 0x0}) 01:51:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 01:51:08 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x175}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 01:51:08 executing program 3: creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x1f3) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0xa002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000000, 0x76643) dup2(r1, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) creat(0x0, 0x0) 01:51:08 executing program 4: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) preadv(r1, &(0x7f00000017c0), 0x0, 0x800000) 01:51:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f00000010c0)={0x0, 0x0}) [ 243.585009][ T8252] NFS: mount program didn't pass any mount data 01:51:08 executing program 5: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) [ 243.655538][ T8261] NFS: mount program didn't pass any mount data [ 243.755689][ T8269] ldm_validate_privheads(): Disk read failed. [ 243.770454][ T8269] loop5: p2 < > p4 [ 243.783328][ T8269] loop5: partition table partially beyond EOD, truncated 01:51:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 01:51:08 executing program 4: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f00000001c0)={0x1ff}) [ 243.805748][ T8269] loop5: p2 size 2 extends beyond EOD, truncated 01:51:08 executing program 3: creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x1f3) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0xa002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000000, 0x76643) dup2(r1, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) creat(0x0, 0x0) 01:51:08 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) fsync(0xffffffffffffffff) [ 243.887487][ T8269] loop5: p4 size 2097152 extends beyond EOD, truncated 01:51:09 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x175}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40bc5311, &(0x7f00000001c0)={{}, 'port0\x00'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 01:51:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002a80)=""/4098, 0x1002}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x1010440}}, 0x50) [ 243.973688][ T8279] EXT4-fs warning (device sda1): ext4_group_extend:1782: can't shrink FS - resize aborted 01:51:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 01:51:09 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/41, 0x29) 01:51:09 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x3000000, [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5b}, {0xffffffff}]}) 01:51:09 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x1f3) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) 01:51:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 01:51:09 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setfsgid(0x0) 01:51:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0, 0x0) 01:51:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='w', 0x1}, {&(0x7f00000001c0)='g', 0x1}], 0x2, 0x0) close(r1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x22881) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x1000, 0x0) 01:51:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) [ 244.789038][ T8323] NFS: mount program didn't pass any mount data [ 244.820129][ T8328] splice write not supported for file /vcs6 (pid: 8328 comm: syz-executor.0) [ 244.877500][ T8333] NFS: mount program didn't pass any mount data 01:51:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 01:51:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001f"], 0x1c}}, 0x0) 01:51:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) 01:51:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 245.064238][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.086344][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:51:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) 01:51:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 01:51:10 executing program 2: 01:51:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) 01:51:10 executing program 4: 01:51:10 executing program 5: 01:51:10 executing program 4: 01:51:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000010046) 01:51:10 executing program 3: 01:51:10 executing program 2: 01:51:10 executing program 4: 01:51:11 executing program 0: 01:51:11 executing program 5: 01:51:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000010046) 01:51:11 executing program 3: 01:51:11 executing program 2: 01:51:11 executing program 4: 01:51:11 executing program 5: 01:51:11 executing program 3: 01:51:11 executing program 0: 01:51:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000010046) 01:51:11 executing program 2: 01:51:11 executing program 4: 01:51:11 executing program 0: 01:51:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:11 executing program 5: 01:51:11 executing program 3: 01:51:11 executing program 2: 01:51:11 executing program 0: 01:51:11 executing program 4: 01:51:11 executing program 5: 01:51:11 executing program 3: 01:51:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:11 executing program 2: 01:51:11 executing program 5: 01:51:11 executing program 4: 01:51:11 executing program 0: 01:51:11 executing program 3: 01:51:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:11 executing program 2: 01:51:11 executing program 5: 01:51:11 executing program 4: 01:51:11 executing program 3: 01:51:11 executing program 0: 01:51:11 executing program 2: 01:51:11 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 01:51:11 executing program 4: 01:51:11 executing program 5: 01:51:11 executing program 2: 01:51:11 executing program 3: 01:51:12 executing program 0: 01:51:12 executing program 5: 01:51:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 01:51:12 executing program 4: 01:51:12 executing program 2: 01:51:12 executing program 3: 01:51:12 executing program 0: 01:51:12 executing program 5: 01:51:12 executing program 4: 01:51:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 01:51:12 executing program 2: 01:51:12 executing program 3: 01:51:12 executing program 0: 01:51:12 executing program 5: 01:51:12 executing program 4: 01:51:12 executing program 2: 01:51:12 executing program 3: 01:51:12 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:12 executing program 5: 01:51:12 executing program 0: 01:51:12 executing program 4: 01:51:12 executing program 2: 01:51:12 executing program 5: 01:51:12 executing program 3: 01:51:12 executing program 2: 01:51:12 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:12 executing program 5: 01:51:12 executing program 4: 01:51:12 executing program 0: 01:51:12 executing program 3: 01:51:12 executing program 2: 01:51:12 executing program 5: 01:51:13 executing program 4: 01:51:13 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:13 executing program 0: 01:51:13 executing program 3: 01:51:13 executing program 4: 01:51:13 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff0500e2", 0x2b}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90503600040f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:51:13 executing program 5: 01:51:13 executing program 0: 01:51:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:13 executing program 3: 01:51:13 executing program 4: 01:51:13 executing program 0: 01:51:13 executing program 5: 01:51:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:13 executing program 3: 01:51:13 executing program 4: 01:51:13 executing program 0: 01:51:13 executing program 2: 01:51:13 executing program 5: 01:51:13 executing program 3: 01:51:13 executing program 4: 01:51:13 executing program 5: 01:51:13 executing program 2: 01:51:13 executing program 0: 01:51:13 executing program 4: 01:51:13 executing program 3: 01:51:13 executing program 2: 01:51:13 executing program 5: 01:51:13 executing program 0: 01:51:13 executing program 4: 01:51:13 executing program 3: 01:51:14 executing program 2: 01:51:14 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000004c0)="58e4c529d3deee5c8c5065cafcead2615e1d791d4474c0168516f114ef85c2cdfe4978eb5f91", 0x26}, {&(0x7f0000000540)="5024d0fc70c8a2f58301e02a461d53e9bbf8c0cbc706a098", 0x18}, {&(0x7f00000005c0)="a5", 0x1}, {0x0}], 0x5, &(0x7f0000000880)=[{0x10, 0x10e}], 0x10}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x9, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 01:51:14 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) 01:51:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16b342, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) 01:51:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:51:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xc12, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x5, {0x5, 0x0, "2db4e7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 01:51:14 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) mmap(&(0x7f0000832000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x0) [ 249.522217][ T7152] usb 5-1: new high-speed USB device number 2 using dummy_hcd 01:51:14 executing program 3: syz_emit_ethernet(0x5e, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x29, 0x0, @remote={0xfe, 0x80, [0x0, 0x50]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x8, "911486df9c0a"}, @generic={0x0, 0x5, "04e4f2"}, @mss={0x2, 0x4}]}}}}}}}}, 0x0) 01:51:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x84ffe0, 0x0) [ 249.639063][ T8530] ================================================================== [ 249.647399][ T8530] BUG: KASAN: use-after-free in __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 249.655560][ T8530] Read of size 8 at addr ffff8880564098a8 by task syz-executor.3/8530 [ 249.663725][ T8530] CPU: 0 PID: 8530 Comm: syz-executor.3 Not tainted 5.8.0-rc5-next-20200715-syzkaller #0 [ 249.673524][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.683581][ T8530] Call Trace: [ 249.686881][ T8530] dump_stack+0x18f/0x20d [ 249.691227][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 249.697044][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 249.702889][ T8530] print_address_description.constprop.0.cold+0xae/0x497 [ 249.709924][ T8530] ? __xfrm6_tunnel_spi_lookup+0x142/0x3b0 [ 249.715782][ T8530] ? lockdep_hardirqs_off+0x66/0xa0 [ 249.720996][ T8530] ? vprintk_func+0x97/0x1a6 [ 249.725603][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 249.731418][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 249.737244][ T8530] kasan_report.cold+0x1f/0x37 [ 249.742023][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 249.747856][ T8530] __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 249.753507][ T8530] xfrm6_tunnel_spi_lookup+0x8a/0x1d0 [ 249.758978][ T8530] xfrmi6_rcv_tunnel+0xb9/0x100 [ 249.763864][ T8530] tunnel6_rcv+0xef/0x2b0 [ 249.768210][ T8530] ip6_protocol_deliver_rcu+0x2e8/0x1670 [ 249.773875][ T8530] ip6_input_finish+0x7f/0x160 [ 249.778651][ T8530] ip6_input+0x9c/0xd0 [ 249.782734][ T8530] ipv6_rcv+0x28e/0x3c0 [ 249.786895][ T8530] ? ip6_rcv_core+0x1bb0/0x1bb0 [ 249.791817][ T8530] __netif_receive_skb_one_core+0x114/0x180 [ 249.797728][ T8530] ? __netif_receive_skb_core+0x3690/0x3690 [ 249.803635][ T8530] ? lockdep_hardirqs_on+0x6a/0xe0 [ 249.808760][ T8530] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 249.815104][ T8530] ? ktime_get_with_offset+0x130/0x1a0 [ 249.820579][ T8530] __netif_receive_skb+0x27/0x1c0 [ 249.825622][ T8530] netif_receive_skb+0x159/0x990 [ 249.830571][ T8530] ? __netif_receive_skb+0x1c0/0x1c0 [ 249.835872][ T8530] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 249.841934][ T8530] ? skb_set_owner_w+0x24e/0x400 [ 249.846961][ T8530] ? __tun_build_skb+0x1cd/0x260 [ 249.851918][ T8530] tun_rx_batched.isra.0+0x460/0x720 [ 249.857219][ T8530] ? tun_get_user+0x197f/0x35b0 [ 249.862130][ T8530] ? tun_sock_write_space+0x1d0/0x1d0 [ 249.867537][ T8530] ? lock_release+0x8d0/0x8d0 [ 249.872228][ T8530] ? lock_downgrade+0x820/0x820 [ 249.877169][ T8530] ? eth_type_trans+0x360/0x690 [ 249.882031][ T8530] ? __local_bh_enable_ip+0x159/0x250 [ 249.887417][ T8530] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 249.893404][ T8530] ? tun_get_user+0x231f/0x35b0 [ 249.898258][ T8530] ? trace_hardirqs_on+0x5f/0x220 [ 249.903299][ T8530] tun_get_user+0x23b2/0x35b0 [ 249.907998][ T8530] ? lock_acquire+0x1f1/0xad0 [ 249.912689][ T8530] ? tun_build_skb+0xf30/0xf30 [ 249.917458][ T8530] ? tun_get+0x160/0x280 [ 249.921722][ T8530] ? aa_file_perm+0x5e2/0x1100 [ 249.926512][ T8530] tun_chr_write_iter+0xba/0x151 [ 249.931469][ T8530] new_sync_write+0x422/0x650 [ 249.936163][ T8530] ? new_sync_read+0x6e0/0x6e0 [ 249.940940][ T8530] ? lock_downgrade+0x820/0x820 [ 249.945812][ T8530] ? apparmor_file_permission+0x26e/0x4e0 [ 249.951556][ T8530] vfs_write+0x59d/0x6b0 [ 249.955812][ T8530] ksys_write+0x12d/0x250 [ 249.960153][ T8530] ? __ia32_sys_read+0xb0/0xb0 [ 249.964928][ T8530] ? lock_is_held_type+0xb0/0xe0 [ 249.969881][ T8530] ? do_syscall_64+0x1c/0xe0 [ 249.974482][ T8530] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 249.980474][ T8530] do_syscall_64+0x60/0xe0 [ 249.984974][ T8530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 249.990876][ T8530] RIP: 0033:0x416661 [ 249.994765][ T8530] Code: Bad RIP value. [ 249.998827][ T8530] RSP: 002b:00007f4117619c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.007245][ T8530] RAX: ffffffffffffffda RBX: 000000000050b3c0 RCX: 0000000000416661 [ 250.015221][ T8530] RDX: 000000000000005e RSI: 00000000200007c0 RDI: 00000000000000f0 [ 250.023198][ T8530] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 250.031192][ T8530] R10: 00007f411761a9d0 R11: 0000000000000293 R12: 00000000ffffffff [ 250.039176][ T8530] R13: 0000000000000c4a R14: 00000000004ce8f4 R15: 00007f411761a6d4 [ 250.047182][ T8530] Allocated by task 7021: [ 250.051528][ T8530] kasan_save_stack+0x1b/0x40 [ 250.056219][ T8530] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 250.061856][ T8530] __kmalloc+0x1a8/0x320 [ 250.066136][ T8530] tomoyo_init_log+0x1335/0x1e50 [ 250.071079][ T8530] tomoyo_supervisor+0x32f/0xeb0 [ 250.076026][ T8530] tomoyo_path_number_perm+0x3ed/0x4d0 [ 250.081495][ T8530] tomoyo_path_mkdir+0x98/0xe0 [ 250.086270][ T8530] security_path_mkdir+0xe8/0x160 [ 250.091297][ T8530] do_mkdirat+0x14b/0x2d0 [ 250.095643][ T8530] do_syscall_64+0x60/0xe0 [ 250.100073][ T8530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 250.105979][ T8530] Freed by task 7021: [ 250.110015][ T8530] kasan_save_stack+0x1b/0x40 [ 250.114701][ T8530] kasan_set_track+0x1c/0x30 [ 250.119303][ T8530] kasan_set_free_info+0x1b/0x30 [ 250.124253][ T8530] __kasan_slab_free+0xd8/0x120 [ 250.129109][ T8530] kfree+0x103/0x2c0 [ 250.133012][ T8530] tomoyo_supervisor+0x350/0xeb0 [ 250.138015][ T8530] tomoyo_path_number_perm+0x3ed/0x4d0 [ 250.143482][ T8530] tomoyo_path_mkdir+0x98/0xe0 [ 250.148257][ T8530] security_path_mkdir+0xe8/0x160 [ 250.153286][ T8530] do_mkdirat+0x14b/0x2d0 [ 250.157635][ T8530] do_syscall_64+0x60/0xe0 [ 250.162064][ T8530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 250.167974][ T8530] The buggy address belongs to the object at ffff888056409800 [ 250.167974][ T8530] which belongs to the cache kmalloc-512 of size 512 [ 250.182061][ T8530] The buggy address is located 168 bytes inside of [ 250.182061][ T8530] 512-byte region [ffff888056409800, ffff888056409a00) [ 250.195340][ T8530] The buggy address belongs to the page: [ 250.200987][ T8530] page:00000000f47273da refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56409 [ 250.211145][ T8530] flags: 0xfffe0000000200(slab) [ 250.216016][ T8530] raw: 00fffe0000000200 ffffea0001590108 ffffea0001594f08 ffff8880aa000600 [ 250.224608][ T8530] raw: 0000000000000000 ffff888056409000 0000000100000004 0000000000000000 [ 250.233187][ T8530] page dumped because: kasan: bad access detected [ 250.239611][ T8530] Memory state around the buggy address: [ 250.245253][ T8530] ffff888056409780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 250.253322][ T8530] ffff888056409800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.261394][ T8530] >ffff888056409880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.269450][ T8530] ^ [ 250.274830][ T8530] ffff888056409900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.282894][ T8530] ffff888056409980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.290961][ T8530] ================================================================== [ 250.299022][ T8530] Disabling lock debugging due to kernel taint [ 250.305254][ T8530] Kernel panic - not syncing: panic_on_warn set ... [ 250.311857][ T8530] CPU: 0 PID: 8530 Comm: syz-executor.3 Tainted: G B 5.8.0-rc5-next-20200715-syzkaller #0 [ 250.323052][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.333109][ T8530] Call Trace: [ 250.336404][ T8530] dump_stack+0x18f/0x20d [ 250.340742][ T8530] ? __xfrm6_tunnel_spi_lookup+0x360/0x3b0 [ 250.346658][ T8530] panic+0x2e3/0x75c [ 250.350570][ T8530] ? __warn_printk+0xf3/0xf3 [ 250.355165][ T8530] ? asm_common_interrupt+0x1e/0x40 [ 250.360366][ T8530] ? trace_hardirqs_on+0x55/0x220 [ 250.365391][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 250.371199][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 250.377020][ T8530] end_report+0x4d/0x53 [ 250.381181][ T8530] kasan_report.cold+0xd/0x37 [ 250.385863][ T8530] ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 250.391673][ T8530] __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0 [ 250.397313][ T8530] xfrm6_tunnel_spi_lookup+0x8a/0x1d0 [ 250.402689][ T8530] xfrmi6_rcv_tunnel+0xb9/0x100 [ 250.407543][ T8530] tunnel6_rcv+0xef/0x2b0 [ 250.411878][ T8530] ip6_protocol_deliver_rcu+0x2e8/0x1670 [ 250.417539][ T8530] ip6_input_finish+0x7f/0x160 [ 250.422311][ T8530] ip6_input+0x9c/0xd0 [ 250.426383][ T8530] ipv6_rcv+0x28e/0x3c0 [ 250.430546][ T8530] ? ip6_rcv_core+0x1bb0/0x1bb0 [ 250.435414][ T8530] __netif_receive_skb_one_core+0x114/0x180 [ 250.441310][ T8530] ? __netif_receive_skb_core+0x3690/0x3690 [ 250.447198][ T8530] ? lockdep_hardirqs_on+0x6a/0xe0 [ 250.452308][ T8530] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 250.458627][ T8530] ? ktime_get_with_offset+0x130/0x1a0 [ 250.464084][ T8530] __netif_receive_skb+0x27/0x1c0 [ 250.469101][ T8530] netif_receive_skb+0x159/0x990 [ 250.474032][ T8530] ? __netif_receive_skb+0x1c0/0x1c0 [ 250.479314][ T8530] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 250.485285][ T8530] ? skb_set_owner_w+0x24e/0x400 [ 250.490225][ T8530] ? __tun_build_skb+0x1cd/0x260 [ 250.495162][ T8530] tun_rx_batched.isra.0+0x460/0x720 [ 250.500439][ T8530] ? tun_get_user+0x197f/0x35b0 [ 250.505281][ T8530] ? tun_sock_write_space+0x1d0/0x1d0 [ 250.510649][ T8530] ? lock_release+0x8d0/0x8d0 [ 250.515334][ T8530] ? lock_downgrade+0x820/0x820 [ 250.520177][ T8530] ? eth_type_trans+0x360/0x690 [ 250.525021][ T8530] ? __local_bh_enable_ip+0x159/0x250 [ 250.530398][ T8530] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 250.536372][ T8530] ? tun_get_user+0x231f/0x35b0 [ 250.541235][ T8530] ? trace_hardirqs_on+0x5f/0x220 [ 250.546275][ T8530] tun_get_user+0x23b2/0x35b0 [ 250.550974][ T8530] ? lock_acquire+0x1f1/0xad0 [ 250.555659][ T8530] ? tun_build_skb+0xf30/0xf30 [ 250.560416][ T8530] ? tun_get+0x160/0x280 [ 250.564667][ T8530] ? aa_file_perm+0x5e2/0x1100 [ 250.569434][ T8530] tun_chr_write_iter+0xba/0x151 [ 250.574369][ T8530] new_sync_write+0x422/0x650 [ 250.579042][ T8530] ? new_sync_read+0x6e0/0x6e0 [ 250.583802][ T8530] ? lock_downgrade+0x820/0x820 [ 250.588651][ T8530] ? apparmor_file_permission+0x26e/0x4e0 [ 250.594370][ T8530] vfs_write+0x59d/0x6b0 [ 250.598960][ T8530] ksys_write+0x12d/0x250 [ 250.603284][ T8530] ? __ia32_sys_read+0xb0/0xb0 [ 250.608048][ T8530] ? lock_is_held_type+0xb0/0xe0 [ 250.613150][ T8530] ? do_syscall_64+0x1c/0xe0 [ 250.617731][ T8530] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 250.623711][ T8530] do_syscall_64+0x60/0xe0 [ 250.628135][ T8530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 250.634019][ T8530] RIP: 0033:0x416661 [ 250.637902][ T8530] Code: Bad RIP value. [ 250.641971][ T8530] RSP: 002b:00007f4117619c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.650403][ T8530] RAX: ffffffffffffffda RBX: 000000000050b3c0 RCX: 0000000000416661 [ 250.658386][ T8530] RDX: 000000000000005e RSI: 00000000200007c0 RDI: 00000000000000f0 [ 250.666352][ T8530] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 250.674329][ T8530] R10: 00007f411761a9d0 R11: 0000000000000293 R12: 00000000ffffffff [ 250.682303][ T8530] R13: 0000000000000c4a R14: 00000000004ce8f4 R15: 00007f411761a6d4 [ 250.691343][ T8530] Kernel Offset: disabled [ 250.695659][ T8530] Rebooting in 86400 seconds..