[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. 2020/09/27 02:17:35 fuzzer started 2020/09/27 02:17:36 dialing manager at 10.128.0.105:38519 2020/09/27 02:17:36 syscalls: 3234 2020/09/27 02:17:36 code coverage: enabled 2020/09/27 02:17:36 comparison tracing: enabled 2020/09/27 02:17:36 extra coverage: extra coverage is not supported by the kernel 2020/09/27 02:17:36 setuid sandbox: enabled 2020/09/27 02:17:36 namespace sandbox: enabled 2020/09/27 02:17:36 Android sandbox: enabled 2020/09/27 02:17:36 fault injection: enabled 2020/09/27 02:17:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/27 02:17:36 net packet injection: enabled 2020/09/27 02:17:36 net device setup: enabled 2020/09/27 02:17:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/27 02:17:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/27 02:17:36 USB emulation: /dev/raw-gadget does not exist 2020/09/27 02:17:36 hci packet injection: enabled 2020/09/27 02:17:36 wifi device emulation: enabled 02:19:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) syzkaller login: [ 160.566589] audit: type=1400 audit(1601173176.275:8): avc: denied { execmem } for pid=6480 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:19:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x10}}, 0x80}}, 0x0) 02:19:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000ec0)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f0000000000000000000ffff7f0000010000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000d20000000000000048000200656362286369706865725f6e756c6c29000000fffffff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240017"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 02:19:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000140)={0x0, [0x5, 0x10007f, 0xde0], [{0x0, 0x4000008}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 02:19:36 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/79, 0x4f) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000001c0)=""/79, 0x4f) 02:19:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1f5583624999c4665398664cc4878a29fc1d080000005e3f9b7cd66bb5e89dba4f65bf5c2fd6d499b05357e238b5ea7918c0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca97ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5616911df2cbc32f508a1145afcd84ff4c71424914408b569768cffa2365c20b667f15ad27ddba5030000008b8b2a33", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 161.742660] IPVS: ftp: loaded support on port[0] = 21 [ 161.932024] chnl_net:caif_netlink_parms(): no params data found [ 161.938450] IPVS: ftp: loaded support on port[0] = 21 [ 162.103692] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.113954] IPVS: ftp: loaded support on port[0] = 21 [ 162.115181] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.129097] device bridge_slave_0 entered promiscuous mode [ 162.160120] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.167063] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.174212] device bridge_slave_1 entered promiscuous mode [ 162.231358] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.245095] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.254457] chnl_net:caif_netlink_parms(): no params data found [ 162.350291] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.357877] team0: Port device team_slave_0 added [ 162.381767] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.387217] IPVS: ftp: loaded support on port[0] = 21 [ 162.392523] team0: Port device team_slave_1 added [ 162.508105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.512747] IPVS: ftp: loaded support on port[0] = 21 [ 162.514385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.547666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.561012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.578971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.607966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.681755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.700614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 162.733987] IPVS: ftp: loaded support on port[0] = 21 [ 162.749940] chnl_net:caif_netlink_parms(): no params data found [ 162.782006] device hsr_slave_0 entered promiscuous mode [ 162.788183] device hsr_slave_1 entered promiscuous mode [ 162.797855] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 162.817028] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.823657] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.832734] device bridge_slave_0 entered promiscuous mode [ 162.852345] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 162.869196] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.876040] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.883105] device bridge_slave_1 entered promiscuous mode [ 162.963396] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.007680] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.100240] chnl_net:caif_netlink_parms(): no params data found [ 163.110883] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.121932] team0: Port device team_slave_0 added [ 163.128531] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.137315] team0: Port device team_slave_1 added [ 163.245030] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.252215] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.260598] device bridge_slave_0 entered promiscuous mode [ 163.271555] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.278660] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.286019] device bridge_slave_1 entered promiscuous mode [ 163.293750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.302811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.330005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.386177] chnl_net:caif_netlink_parms(): no params data found [ 163.406047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.412351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.439487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.453869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.503228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.546229] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.581597] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.622104] chnl_net:caif_netlink_parms(): no params data found [ 163.651183] device hsr_slave_0 entered promiscuous mode [ 163.664122] device hsr_slave_1 entered promiscuous mode [ 163.677961] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.690879] team0: Port device team_slave_0 added [ 163.710469] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 163.719641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 163.732236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.740189] team0: Port device team_slave_1 added [ 163.766248] Bluetooth: hci0: command 0x0409 tx timeout [ 163.774034] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 163.801208] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.812160] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.822063] device bridge_slave_0 entered promiscuous mode [ 163.849084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.855621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.881824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.894225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.901371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.927288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.940934] Bluetooth: hci1: command 0x0409 tx timeout [ 163.946501] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.952870] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.961011] device bridge_slave_1 entered promiscuous mode [ 163.981482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.034102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.052901] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.059892] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.067633] device bridge_slave_0 entered promiscuous mode [ 164.076386] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.084016] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.092325] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.095487] Bluetooth: hci2: command 0x0409 tx timeout [ 164.101678] device bridge_slave_1 entered promiscuous mode [ 164.139369] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.167968] device hsr_slave_0 entered promiscuous mode [ 164.174395] device hsr_slave_1 entered promiscuous mode [ 164.202476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.217808] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 164.235074] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.243393] team0: Port device team_slave_0 added [ 164.257106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.264768] team0: Port device team_slave_1 added [ 164.273282] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 164.292425] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.310628] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.317683] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.324799] device bridge_slave_0 entered promiscuous mode [ 164.333955] Bluetooth: hci3: command 0x0409 tx timeout [ 164.344624] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.351572] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.359816] device bridge_slave_1 entered promiscuous mode [ 164.417759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.424071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.452650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.466782] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.481914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.485674] Bluetooth: hci4: command 0x0409 tx timeout [ 164.489950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.519359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.531127] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.540120] team0: Port device team_slave_0 added [ 164.553730] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.561647] team0: Port device team_slave_1 added [ 164.573651] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.582611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.617135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 164.623809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.645492] Bluetooth: hci5: command 0x0409 tx timeout [ 164.678133] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.688039] team0: Port device team_slave_0 added [ 164.694176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.701239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.726942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.739848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.747077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.773242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.791682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.802052] device hsr_slave_0 entered promiscuous mode [ 164.809142] device hsr_slave_1 entered promiscuous mode [ 164.815125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.824793] team0: Port device team_slave_1 added [ 164.840374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.851684] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.861919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.869135] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 164.880497] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 164.899377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.907561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.933660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.956253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.962522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.988522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.031251] device hsr_slave_0 entered promiscuous mode [ 165.037473] device hsr_slave_1 entered promiscuous mode [ 165.043405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.052791] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.078202] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 165.096682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.104496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.112360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.129960] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 165.136161] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.148601] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 165.200583] device hsr_slave_0 entered promiscuous mode [ 165.207400] device hsr_slave_1 entered promiscuous mode [ 165.238939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.246685] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 165.258066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 165.275996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.284440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.292466] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.298990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.308497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.325186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.359560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.365976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.373782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.382806] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.389200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.400022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.428275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.442859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.452814] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 165.488441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.501880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.516812] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.542710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.552520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.563915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 165.599921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.607408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.615233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.626833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.634890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 165.660578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.668102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.675053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.684007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.696305] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 165.702412] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.729901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 165.741488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.770032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.778060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.787090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.794810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.803322] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.809724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.818992] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.825039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.837375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.848678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.857702] Bluetooth: hci0: command 0x041b tx timeout [ 165.870925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.878467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.887588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.896455] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.902820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.911303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.928448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.941610] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 165.963113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.974444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.996387] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 166.011102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.021976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.034003] Bluetooth: hci1: command 0x041b tx timeout [ 166.049348] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.058205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.076820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.084175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.093453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.103210] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 166.121442] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.142082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.149875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.160897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 166.171609] Bluetooth: hci2: command 0x041b tx timeout [ 166.171755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.192418] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.207479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.215128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.228506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 166.239286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.251249] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 166.257892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.269128] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.288244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.297352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.304729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.312405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.327492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.338261] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 166.344323] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.365076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.395279] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 166.405546] Bluetooth: hci3: command 0x041b tx timeout [ 166.409364] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 166.422379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.435045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.447584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.456252] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 166.465503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.473481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.484413] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.490805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.498147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.504830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.514446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.530436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.537264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.544636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.554143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.562020] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.568465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.568708] Bluetooth: hci4: command 0x041b tx timeout [ 166.581278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.589840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.600947] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.611970] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 166.623956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.639298] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 166.647685] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.659408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 166.669154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.677195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.685114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.693718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.701843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.709239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.723188] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 166.731203] Bluetooth: hci5: command 0x041b tx timeout [ 166.737758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.748935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 166.764068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.774228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.782614] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.789055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.796522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.810017] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 166.822010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.836487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.845239] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 166.856809] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.863462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.873116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.881493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.889754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.898861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.911188] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.921137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.930534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.943768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.952354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.969738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.979680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.989936] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 166.998789] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 167.006435] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 167.018123] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.025508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.033873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.043079] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.049573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.057634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.065893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.073551] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.079996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.087169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.094274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.102085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.114269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.125245] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 167.132961] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.141499] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 167.153155] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 167.161377] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 167.169641] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 167.178720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 167.186777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.194533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.203111] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.209526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.217549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.224969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.232774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.240464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.249840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 167.257742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.264828] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.271945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.283135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 167.294305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.310706] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 167.320548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 167.328774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.337667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.345741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.353527] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.359955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.367939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.377324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.384835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.392687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.400698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.408070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.415080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.426361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.440425] device veth0_vlan entered promiscuous mode [ 167.449820] device veth0_vlan entered promiscuous mode [ 167.460110] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 167.466490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.474853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.487115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.495103] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.501585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.510390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 167.523628] device veth1_vlan entered promiscuous mode [ 167.540244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 167.548546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 167.567462] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 167.585524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.593417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.602016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.619237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 167.641537] device veth1_vlan entered promiscuous mode [ 167.648505] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 167.657384] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 167.667103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.674317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.683277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.692943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.699843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.708324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.716572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.728464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.744607] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 167.758315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.767701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.778043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.784917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.792896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.801532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.810220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.818488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.826356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.834033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.842448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.850293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.868967] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 167.877908] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 167.888977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 167.897997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.920966] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 167.928545] Bluetooth: hci0: command 0x040f tx timeout [ 167.934018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.942515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.950701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.959148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.966961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.974343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.982721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.993185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 168.001542] device veth0_macvtap entered promiscuous mode [ 168.009709] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 168.018614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 168.031853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 168.043982] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 168.055861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.066222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.074216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.086427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.089382] Bluetooth: hci1: command 0x040f tx timeout [ 168.094120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.107264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.114988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.122989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.130978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.142350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 168.151606] device veth1_macvtap entered promiscuous mode [ 168.158769] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 168.179551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 168.188980] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 168.195018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.204610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.217322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.224818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.233046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.241068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.245896] Bluetooth: hci2: command 0x040f tx timeout [ 168.250922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 168.267448] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 168.281854] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 168.289677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.299847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.312473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.322803] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 168.330665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.342149] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 168.350171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.358675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.373198] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 168.389072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 168.400906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 168.412325] device veth0_macvtap entered promiscuous mode [ 168.420584] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 168.430760] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 168.443112] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 168.450195] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 168.457418] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 168.468466] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 168.479461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.486984] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.494026] Bluetooth: hci3: command 0x040f tx timeout [ 168.494563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.506993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.513709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.522114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.531652] device veth1_macvtap entered promiscuous mode [ 168.539685] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 168.552772] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 168.562209] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 168.573089] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 168.580862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.591302] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 168.633331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.641802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.652606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.660606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.669296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.677814] Bluetooth: hci4: command 0x040f tx timeout [ 168.680103] device veth0_vlan entered promiscuous mode [ 168.694790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.704408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 168.712198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.719678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.733099] device veth1_vlan entered promiscuous mode [ 168.740783] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 168.748964] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 168.760036] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 168.771628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 168.783347] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 168.791200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.799393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.805875] Bluetooth: hci5: command 0x040f tx timeout [ 168.808089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.819107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.826236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.832897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.845286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.861107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.871415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.884583] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 168.892511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.904490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.916326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.927498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.939837] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 168.973945] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 168.994784] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 169.013627] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 169.021365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.031952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.043513] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 169.051171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.059370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.067492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.075168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.083307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.094663] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 169.106938] device veth0_macvtap entered promiscuous mode [ 169.113514] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 169.124911] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 169.143121] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.153147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.176009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.184268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.192606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.202356] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 169.216426] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 169.226508] device veth1_macvtap entered promiscuous mode [ 169.232962] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 169.242963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.262714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.292568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.309636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 169.378195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 169.401747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.419294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.430880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.441006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.452670] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 169.460075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.474256] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 169.482358] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 169.489364] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 169.500405] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 169.508048] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 169.514615] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 169.523435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.536281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.547332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.558605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.568606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.578951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.590383] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 169.598186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.610951] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 169.622238] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 169.630353] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 169.637888] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 169.645678] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 169.654632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.668366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.681902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.689924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.698003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.705929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.721981] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 169.733221] device veth0_vlan entered promiscuous mode [ 169.742434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.759635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.770706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.780558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.788591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.797336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.810796] device veth0_vlan entered promiscuous mode [ 169.817604] device veth0_vlan entered promiscuous mode [ 169.864643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.877818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.902007] device veth1_vlan entered promiscuous mode [ 169.917110] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 169.929072] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 169.936867] device veth1_vlan entered promiscuous mode [ 169.943135] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 169.963551] device veth1_vlan entered promiscuous mode [ 169.976165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.984497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.006168] Bluetooth: hci0: command 0x0419 tx timeout [ 170.018577] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 170.030514] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 170.063427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.073792] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.081698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.090866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.102421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.113503] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 170.122778] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 170.137878] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 170.167133] Bluetooth: hci1: command 0x0419 tx timeout [ 170.181277] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 170.202711] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 170.220610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.228420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.243398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.252657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.267512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.269586] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 170.281605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.287719] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 170.294322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.304097] device veth0_macvtap entered promiscuous mode [ 170.315957] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 170.326321] Bluetooth: hci2: command 0x0419 tx timeout [ 170.335134] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 170.351830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.358367] device veth1_macvtap entered promiscuous mode [ 170.374662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.390758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.398814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.408322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.430573] device veth0_macvtap entered promiscuous mode [ 170.443733] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 170.461812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 170.484992] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 170.501347] device veth1_macvtap entered promiscuous mode [ 170.515658] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 170.523832] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 170.536948] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.544546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.554154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.562563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.566207] Bluetooth: hci3: command 0x0419 tx timeout [ 170.580011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready 02:19:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) [ 170.594488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.623963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:19:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [0xc0000100, 0x0, 0x3, 0x2, 0xc0010112, 0x0, 0x7]}) [ 170.651403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.675133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.684961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.696122] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 170.711843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.725720] Bluetooth: hci4: command 0x0419 tx timeout [ 170.737777] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 170.754260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.774129] device veth0_macvtap entered promiscuous mode [ 170.775937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.781524] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready 02:19:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0, 0x60}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 170.801637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.815999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.836603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.843941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.875124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.887713] Bluetooth: hci5: command 0x0419 tx timeout [ 170.893018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.909693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.921651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.932163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.942049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.954263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.974308] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 170.983207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.998919] device veth1_macvtap entered promiscuous mode [ 171.014174] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 171.029830] *** Guest State *** [ 171.032483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 171.043577] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 171.055808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.063387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.073592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.084196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 171.089521] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 171.112121] CR3 = 0x0000000000000000 [ 171.113670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 171.123253] RSP = 0x0000000000000000 RIP = 0x0000000000000231 [ 171.163353] RFLAGS=0x00000a13 DR7 = 0x0000000000000400 [ 171.164265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 171.182836] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 171.198248] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 02:19:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) [ 171.212066] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 171.223641] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 171.230966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.250435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.261652] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 171.264514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.288829] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 171.292402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.308369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.313622] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 171.318438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.339449] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 171.345431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.353727] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 171.361594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.371732] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 171.393036] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 171.393066] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 171.409565] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 171.415144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.424070] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 171.440460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.449477] Interruptibility = 00000001 ActivityState = 00000000 [ 171.456599] *** Host State *** [ 171.459885] RIP = 0xffffffff811ca1ca RSP = 0xffff88804b607878 [ 171.461571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.466485] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 171.466500] FSBase=00007f1d5bb4d700 GSBase=ffff8880ae200000 TRBase=fffffe0000003000 [ 171.489012] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 171.495067] CR0=0000000080050033 CR3=00000000a8099000 CR4=00000000001426f0 [ 171.502191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.509174] Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff87c013e0 [ 171.518864] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 171.524996] *** Control State *** [ 171.527632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.528935] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000e2 [ 171.545117] EntryControls=0000d1ff ExitControls=002fefff [ 171.550731] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 171.557816] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 171.561021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.564552] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 171.581408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.588830] reason=80000021 qualification=0000000000000003 [ 171.596537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.603004] IDTVectoring: info=00000000 errcode=00000000 [ 171.612574] TSC Offset = 0xffffffa2bc1bcea8 [ 171.617036] EPT pointer = 0x0000000094a2f01e [ 171.621515] Virtual processor ID = 0x0001 [ 171.626089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.637668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 02:19:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x29, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000200)=""/251, 0x32, 0xfb, 0x8}, 0x20) [ 171.668041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.684702] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 171.692487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.700078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 02:19:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @volatile]}}, &(0x7f0000004600)=""/206, 0x3a, 0xce, 0x8}, 0x20) 02:19:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) [ 171.737996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.780291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.790903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.800664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.810962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.821571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.851662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.871255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.896342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.920919] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 171.932292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.948718] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 171.956917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.964995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.974057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.988569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.990360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:19:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2b, 0x1, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x14, &(0x7f0000000200)={0x2}, 0x10) [ 172.002896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.041523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.061353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.095274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.125437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.135179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.145564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.155345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.165097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.184592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.195789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.206569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.218074] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 172.225064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.261307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.273319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.303502] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 172.339100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.355917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.371614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.474277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.598365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 02:19:48 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) [ 172.638699] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 172.647881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.658422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.693450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.745391] hrtimer: interrupt took 45241 ns [ 172.772085] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 172.784243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.802844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.816046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.894046] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 172.914180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.926055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.963946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.030659] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 173.052590] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 173.072607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.084326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.100117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.108315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.110934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.233215] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 173.260569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.279995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.307270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:19:49 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) [ 173.351932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:19:49 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) 02:19:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x5f, 0x2e, 0x2e, 0x52, 0x5f, 0x5f, 0x2e, 0x2e, 0x5f, 0x57, 0x2e]}, 0x40) 02:19:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002500)=""/128, 0x80}], 0x1}}], 0x2, 0x0, 0x0) 02:19:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newqdisc={0x40c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x25c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "28a6b29f289828fe5b755980f431ca66c9ca5649337df69e63a7a59103256966e27052d2c829b57f22e2a16162d11f16e75dcc00209bcb3d4b1e3ef0d54afc5a7f372bdbd8eed9d5a0462c4f3e7f4fa487c1c283d53f74bfcc25dcc4865a543f80d934db10bc75a281f82c41be27485c8ebd2479519fe7cde540e5ae0b124c8d4ab12c41e9360cfadb173d6bf180e07fdf855821606f36a24de3e5d777f62f9c1e0b027eb0f14722eec74947dd1486169df1361d596836a7cf0c72e9e0ddf4d3c2e43abaf1c181435653fc1953d454845087bfbb2954dd8c29c9f2885f7ab9b768dd475226e48e734790efaebf6e26c3d9fccb7388b67cf4b39b19f5cf2f4a76"}, @TCA_CHOKE_STAB={0x104, 0x2, "a4a91895573ea12826dbf2e4fb3caca603f07de371e44d632e8cb6f478d44e4dfbb5bb19ed2ecc6b48c6fa24dc79b76d2639d62ae88f2d18f79319f79f61b6014dc3785daeff92e498077f8c087504fe848e3065f36d1b0d68855f86862e3174dd1c6a9529420487810aff8bd303010dcc03672475b8d59a72758e675621ded12db154e72fc4f7725bdbab091eed9b3cce181159e0cf488f6d07928d6e82ea31629761c694e2ca301b1b1601823c97a154cd92ca848e40eb9205210f8042109fa38c7b6c11ce613666121822dabd72f342689060f17bb622306b99d3b52926ca862b3e6f534fa23ce806868e7d9e534700d95c3775a65d97eb2113e2a2dd6c40"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x68, 0x2, 0x4, 0x9, 0x12, 0x16, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x8, 0x20000000, 0x2, 0x0, 0x1d, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xba, 0x1, 0x0, 0x1c, 0x20, 0x1e}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x7, 0x9, 0x40, 0x13, 0x1, 0x6}}]}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0x7, 0x3, 0x2, 0x5, 0x5, 0x2}}, {0x8, 0x2, [0x101, 0x3f]}}, {{0x1c, 0x1, {0x0, 0xb9, 0x5, 0x5, 0x2, 0x10001, 0x8000, 0x6}}, {0x10, 0x2, [0x3, 0xe9c, 0x7fff, 0x3, 0xfffd, 0xfff7]}}, {{0x1c, 0x1, {0x6, 0x80, 0x8001, 0x3, 0x2, 0x5, 0xffff, 0x7}}, {0x12, 0x2, [0x2, 0x40, 0x0, 0x6, 0x8, 0x6, 0x4]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0xffff, 0x1, 0x7, 0x3f, 0x3}}, {0xa, 0x2, [0x80, 0xfff, 0x4]}}, {{0x1c, 0x1, {0x6, 0x7, 0x1, 0xffff0001, 0x2, 0x9, 0x800, 0x3}}, {0xa, 0x2, [0x401, 0xfffc, 0x0]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0x3, 0xfaf, 0x2, 0xff, 0x1, 0x3}}, {0xa, 0x2, [0x7, 0x3ff, 0x9]}}, {{0x1c, 0x1, {0xdc, 0x14, 0x1608, 0x7ff, 0x0, 0x3, 0x209, 0x3}}, {0xa, 0x2, [0x9, 0x80, 0xfff9]}}]}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20}, @TCA_RATE={0x6, 0x5, {0x0, 0x1f}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x72, 0xa96, 0x0, 0x5, 0x0, 0x7}}, {0x12, 0x2, [0x7ff, 0x7, 0x1ff, 0x7, 0x7, 0x4, 0xbd]}}]}]}, 0x40c}}, 0x0) 02:19:51 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) 02:19:51 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) 02:19:51 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) [ 175.944806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:19:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}, 0x10) 02:19:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xa1, 0x4}, 0x40) 02:19:51 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000340)={0x5, "756778317ee6343c30ad68836994751a2b884141a3cb054ca44d0f83c861aeef"}) 02:19:51 executing program 1: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000080)={0x0, 0x0, 0x2}) 02:19:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x6, 0x3, 0xff, 0x7f, 0x0, 0x15, 0x2002, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x100, 0x10, 0x1, 0x0, 0xe, 0x3, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = gettid() ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRESOCT]) syz_open_procfs$namespace(r6, &(0x7f0000000340)='ns/pid\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4908, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0x108}, 0xb070, 0x2, 0x0, 0x0, 0x2000000}, r4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x0, 0x0, 0x37, 0x0, 0xb, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x4, 0x8, 0x1, 0x1000000, 0x20, 0x7ff}, r5, 0x4, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xdc, 0x8, 0x46, 0x1f, 0x0, 0xffff, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x0, 0x0, 0x6, 0x1, 0x0, 0x6cd1}, 0xffffffffffffffff, 0x8, r7, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 02:19:52 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/246, 0xf6}], 0x1) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="d1", 0x1}, {&(0x7f0000000880)="f76922dcccd7ad145b9f1d5b9ece9bb1dc46b159444e83b81359b2a56d56c393e4a63a67b59d3de485921be3376105c1300ac5a3042dabd02648bb568e621effaf7cc1780fbaeccaa0f9d07bcb77fb183c456dd25257e86440b3cfa2ca4144a508ee594757fff653bfee247ca3b2a346df2473c675afbfb8db1bfb574e3e64458a7945ceb08a63773f7a896e4a5f228769e46729053da43d6f7973e617b97dd576b9836fc6e505986a10e36538093e1ed77bae2eeeb7ff0e70445bf3745fd1566297559e464638f47ff638e8460f5ca4e129ad4868bbc9f4ee4c65ff7e23ca177834bbb0f0e03a96abcd8349f53e2408e6b5f27034", 0xf5}], 0x2}], 0x1, 0x0) [ 176.302904] device batadv0 entered promiscuous mode 02:19:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x32) 02:19:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x10, &(0x7f0000001340)=[{&(0x7f0000001100)="7f8187bbe7ae57f9708da4177ba207ca40dc611f76bffa177757215e4174bee52acebdfa38c1df5f84f2f5f92c60e4814e6f0d311bb1780365d99e73d12b5fdb4a5f1311b2912c8bdebb3fc514b6", 0x4e}, {&(0x7f0000001200)="a9a210e9d28a84756402047efda9bcfcdc26667c776a9226b4b99d9f66fa073bd546b6100bb1d3125925b0c9576d5d307ddc", 0x20001232}], 0x2}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 02:19:52 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='cpu\n&\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00') [ 176.904277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.045659] ================================================================================ [ 177.054434] UBSAN: Undefined behaviour in net/core/gen_estimator.c:87:38 [ 177.061272] shift exponent -23 is negative [ 177.065512] CPU: 1 PID: 8085 Comm: syz-executor.3 Not tainted 4.19.148-syzkaller #0 [ 177.073406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.082768] Call Trace: [ 177.085347] [ 177.087501] dump_stack+0x22c/0x33e [ 177.091142] ubsan_epilogue+0xe/0x3a [ 177.094858] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 177.101009] ? cpumask_next+0x3c/0x40 [ 177.104823] ? est_fetch_counters+0xc6/0x160 [ 177.109238] est_timer.cold+0x96/0x126 [ 177.113132] ? est_fetch_counters+0x160/0x160 [ 177.117636] call_timer_fn+0x177/0x760 [ 177.121526] ? est_fetch_counters+0x160/0x160 [ 177.126024] ? init_timer_key+0x370/0x370 [ 177.130173] ? _raw_spin_unlock_irq+0x24/0x90 [ 177.134675] ? est_fetch_counters+0x160/0x160 [ 177.139179] expire_timers+0x243/0x500 [ 177.143071] run_timer_softirq+0x259/0x730 [ 177.147315] ? expire_timers+0x500/0x500 [ 177.151385] ? kvm_sched_clock_read+0x14/0x40 [ 177.155878] ? sched_clock+0x2a/0x50 [ 177.159589] ? sched_clock_cpu+0x18/0x260 [ 177.163736] ? check_preemption_disabled+0x41/0x2b0 [ 177.168772] __do_softirq+0x27d/0xad2 [ 177.172588] irq_exit+0x22d/0x270 [ 177.176062] smp_apic_timer_interrupt+0x15f/0x5d0 [ 177.180907] apic_timer_interrupt+0xf/0x20 [ 177.185135] [ 177.187373] RIP: 0033:0x412d10 [ 177.190564] Code: 00 0f 86 bf 00 00 00 49 8d ae 88 00 00 00 4c 89 ef 48 89 ee e8 21 f7 ff ff 48 39 eb 74 3c 0f 1f 40 00 48 8b 75 00 48 8b 55 f8 <48> 8d 45 f8 48 39 f2 77 0a e9 9b 00 00 00 66 90 48 89 c8 48 89 50 [ 177.209468] RSP: 002b:00007fffea906060 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 177.217211] RAX: 00007fe8e8f61bf0 RBX: 00007fe8e8fed8a8 RCX: 00007fe8e8f5f1d8 [ 177.224476] RDX: ffffffff81d4b8d0 RSI: ffffffff81d4b8d0 RDI: 00007fe8e8ee4010 [ 177.231741] RBP: 00007fe8e8f61bf8 R08: ffffffff8100a4bd R09: 00000000ba1ad6e1 [ 177.239009] R10: 00007fffea906200 R11: 0000000000000246 R12: 000000000118cfc8 [ 177.246277] R13: 00007fe8e8ee4008 R14: 00007fe8e8ee4000 R15: 0000000000021314 [ 177.253564] ? do_syscall_64+0x9d/0x670 [ 177.257542] ? pagemap_pmd_range+0xd60/0x1af0 [ 177.262036] ? pagemap_pmd_range+0xd60/0x1af0 [ 177.266531] ================================================================================ [ 177.275353] ================================================================================ [ 177.283935] UBSAN: Undefined behaviour in net/core/gen_estimator.c:90:46 [ 177.291972] shift exponent -23 is negative [ 177.296225] CPU: 1 PID: 8085 Comm: syz-executor.3 Not tainted 4.19.148-syzkaller #0 [ 177.304019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.313374] Call Trace: [ 177.315956] [ 177.318122] dump_stack+0x22c/0x33e [ 177.321759] ubsan_epilogue+0xe/0x3a [ 177.325481] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 177.331631] ? cpumask_next+0x3c/0x40 [ 177.335451] ? est_fetch_counters+0xc6/0x160 [ 177.339957] est_timer.cold+0x17/0x126 [ 177.343858] ? est_fetch_counters+0x160/0x160 [ 177.348368] call_timer_fn+0x177/0x760 [ 177.352259] ? est_fetch_counters+0x160/0x160 [ 177.356786] ? init_timer_key+0x370/0x370 [ 177.360942] ? _raw_spin_unlock_irq+0x24/0x90 [ 177.365468] ? est_fetch_counters+0x160/0x160 [ 177.369996] expire_timers+0x243/0x500 [ 177.373892] run_timer_softirq+0x259/0x730 [ 177.378138] ? expire_timers+0x500/0x500 [ 177.382208] ? kvm_sched_clock_read+0x14/0x40 [ 177.386711] ? sched_clock+0x2a/0x50 [ 177.390432] ? sched_clock_cpu+0x18/0x260 [ 177.394585] ? check_preemption_disabled+0x41/0x2b0 [ 177.399613] __do_softirq+0x27d/0xad2 [ 177.403429] irq_exit+0x22d/0x270 [ 177.406893] smp_apic_timer_interrupt+0x15f/0x5d0 [ 177.411745] apic_timer_interrupt+0xf/0x20 [ 177.415989] [ 177.418226] RIP: 0033:0x412d10 [ 177.421422] Code: 00 0f 86 bf 00 00 00 49 8d ae 88 00 00 00 4c 89 ef 48 89 ee e8 21 f7 ff ff 48 39 eb 74 3c 0f 1f 40 00 48 8b 75 00 48 8b 55 f8 <48> 8d 45 f8 48 39 f2 77 0a e9 9b 00 00 00 66 90 48 89 c8 48 89 50 [ 177.440327] RSP: 002b:00007fffea906060 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 177.448042] RAX: 00007fe8e8f61bf0 RBX: 00007fe8e8fed8a8 RCX: 00007fe8e8f5f1d8 [ 177.456007] RDX: ffffffff81d4b8d0 RSI: ffffffff81d4b8d0 RDI: 00007fe8e8ee4010 [ 177.463277] RBP: 00007fe8e8f61bf8 R08: ffffffff8100a4bd R09: 00000000ba1ad6e1 [ 177.470572] R10: 00007fffea906200 R11: 0000000000000246 R12: 000000000118cfc8 [ 177.477853] R13: 00007fe8e8ee4008 R14: 00007fe8e8ee4000 R15: 0000000000021314 [ 177.485154] ? do_syscall_64+0x9d/0x670 [ 177.489133] ? pagemap_pmd_range+0xd60/0x1af0 [ 177.493629] ? pagemap_pmd_range+0xd60/0x1af0 [ 177.498131] ================================================================================ 02:19:53 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x24001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0) 02:19:53 executing program 5: getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r5}) 02:19:53 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) 02:19:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x10, &(0x7f0000001340)=[{&(0x7f0000001100)="7f8187bbe7ae57f9708da4177ba207ca40dc611f76bffa177757215e4174bee52acebdfa38c1df5f84f2f5f92c60e4814e6f0d311bb1780365d99e73d12b5fdb4a5f1311b2912c8bdebb3fc514b6", 0x4e}, {&(0x7f0000001200)="a9a210e9d28a84756402047efda9bcfcdc26667c776a9226b4b99d9f66fa073bd546b6100bb1d3125925b0c9576d5d307ddc", 0x20001232}], 0x2}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 02:19:53 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) 02:19:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x6, 0x3, 0xff, 0x7f, 0x0, 0x15, 0x2002, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x100, 0x10, 0x1, 0x0, 0xe, 0x3, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = gettid() ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRESOCT]) syz_open_procfs$namespace(r6, &(0x7f0000000340)='ns/pid\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4908, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0x108}, 0xb070, 0x2, 0x0, 0x0, 0x2000000}, r4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x0, 0x0, 0x37, 0x0, 0xb, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x4, 0x8, 0x1, 0x1000000, 0x20, 0x7ff}, r5, 0x4, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xdc, 0x8, 0x46, 0x1f, 0x0, 0xffff, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x0, 0x0, 0x6, 0x1, 0x0, 0x6cd1}, 0xffffffffffffffff, 0x8, r7, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 02:19:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x6, 0x3, 0xff, 0x7f, 0x0, 0x15, 0x2002, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x100, 0x10, 0x1, 0x0, 0xe, 0x3, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = gettid() ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRESOCT]) syz_open_procfs$namespace(r6, &(0x7f0000000340)='ns/pid\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4908, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0x108}, 0xb070, 0x2, 0x0, 0x0, 0x2000000}, r4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x0, 0x0, 0x37, 0x0, 0xb, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x4, 0x8, 0x1, 0x1000000, 0x20, 0x7ff}, r5, 0x4, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xdc, 0x8, 0x46, 0x1f, 0x0, 0xffff, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x0, 0x0, 0x6, 0x1, 0x0, 0x6cd1}, 0xffffffffffffffff, 0x8, r7, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 02:19:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001100)={0x40000000}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 02:19:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 178.027410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.057654] device batadv0 entered promiscuous mode 02:19:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x6, 0x3, 0xff, 0x7f, 0x0, 0x15, 0x2002, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x100, 0x10, 0x1, 0x0, 0xe, 0x3, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = gettid() ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRESOCT]) syz_open_procfs$namespace(r6, &(0x7f0000000340)='ns/pid\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4908, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0x108}, 0xb070, 0x2, 0x0, 0x0, 0x2000000}, r4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x0, 0x0, 0x37, 0x0, 0xb, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x4, 0x8, 0x1, 0x1000000, 0x20, 0x7ff}, r5, 0x4, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xdc, 0x8, 0x46, 0x1f, 0x0, 0xffff, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x0, 0x0, 0x6, 0x1, 0x0, 0x6cd1}, 0xffffffffffffffff, 0x8, r7, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 02:19:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x10, &(0x7f0000001340)=[{&(0x7f0000001100)="7f8187bbe7ae57f9708da4177ba207ca40dc611f76bffa177757215e4174bee52acebdfa38c1df5f84f2f5f92c60e4814e6f0d311bb1780365d99e73d12b5fdb4a5f1311b2912c8bdebb3fc514b6", 0x4e}, {&(0x7f0000001200)="a9a210e9d28a84756402047efda9bcfcdc26667c776a9226b4b99d9f66fa073bd546b6100bb1d3125925b0c9576d5d307ddc", 0x20001232}], 0x2}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 178.769027] 8021q: adding VLAN 0 to HW filter on device batadv0 02:19:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xbe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43408) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 02:19:54 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0xfffffffe, @loopback}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 179.089827] audit: type=1804 audit(1601173194.795:9): pid=8196 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir675607200/syzkaller.1DTrgV/4/memory.events" dev="sda1" ino=15784 res=1 02:19:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x4c}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 179.287073] audit: type=1804 audit(1601173194.985:10): pid=8200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir675607200/syzkaller.1DTrgV/4/memory.events" dev="sda1" ino=15784 res=1 02:19:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xbe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43408) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 02:19:55 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)) 02:19:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xbe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43408) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 02:19:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x10, &(0x7f0000001340)=[{&(0x7f0000001100)="7f8187bbe7ae57f9708da4177ba207ca40dc611f76bffa177757215e4174bee52acebdfa38c1df5f84f2f5f92c60e4814e6f0d311bb1780365d99e73d12b5fdb4a5f1311b2912c8bdebb3fc514b6", 0x4e}, {&(0x7f0000001200)="a9a210e9d28a84756402047efda9bcfcdc26667c776a9226b4b99d9f66fa073bd546b6100bb1d3125925b0c9576d5d307ddc", 0x20001232}], 0x2}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 179.556607] audit: type=1804 audit(1601173195.255:11): pid=8212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir675607200/syzkaller.1DTrgV/5/memory.events" dev="sda1" ino=15784 res=1 02:19:55 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000002980)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x0, "7f"}], 0x3}, 0x0) 02:19:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {}]}]}}, &(0x7f0000000300)=""/244, 0x36, 0xf4, 0x8}, 0x20) [ 179.932955] audit: type=1804 audit(1601173195.635:12): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir238767594/syzkaller.NNsrRy/7/memory.events" dev="sda1" ino=15788 res=1 [ 180.019376] 8021q: adding VLAN 0 to HW filter on device batadv0 02:19:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x6, 0x3, 0xff, 0x7f, 0x0, 0x15, 0x2002, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x100, 0x10, 0x1, 0x0, 0xe, 0x3, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = gettid() ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRESOCT]) syz_open_procfs$namespace(r6, &(0x7f0000000340)='ns/pid\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4908, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0x108}, 0xb070, 0x2, 0x0, 0x0, 0x2000000}, r4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x0, 0x0, 0x37, 0x0, 0xb, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x4, 0x8, 0x1, 0x1000000, 0x20, 0x7ff}, r5, 0x4, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xdc, 0x8, 0x46, 0x1f, 0x0, 0xffff, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x0, 0x0, 0x6, 0x1, 0x0, 0x6cd1}, 0xffffffffffffffff, 0x8, r7, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 02:19:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x12f) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 02:19:56 executing program 4: pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 02:19:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xbe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43408) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 02:19:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010020, 0x0) sendmsg$can_raw(r2, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000005000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4c529325bec895bcb02cd74d7287b7fde99d4916bb7b835c9c6a8ccdf33a9f8cd58491833ffd4eb22d0c05eb340c116849f22056a26ab8eeba52b5fdd90bf540"}, 0x48}}, 0x0) 02:19:56 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)) [ 181.149600] audit: type=1400 audit(1601173196.855:13): avc: denied { create } for pid=8254 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 02:19:56 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 181.236557] audit: type=1400 audit(1601173196.855:14): avc: denied { name_bind } for pid=8254 comm="syz-executor.1" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 02:19:57 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=']', 0x1}], 0x1, &(0x7f00000007c0)=[{0x10}], 0x10}}], 0x1, 0x0) [ 181.352044] audit: type=1400 audit(1601173196.855:15): avc: denied { node_bind } for pid=8254 comm="syz-executor.1" saddr=::1 src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 02:19:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'eth'}}}}}, 0x2c}}, 0x0) 02:19:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20003000, &(0x7f0000001000/0x2000)=nil}) [ 181.453801] audit: type=1400 audit(1601173196.855:16): avc: denied { name_connect } for pid=8254 comm="syz-executor.1" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 02:19:57 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0xfffffffffffffeff, 0x0, 0xdbb2, 0x9]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000300)={@any, 0x0, 0x0, 0x0, 0x0, 0x0, "0c21d56fa46a34e9d23a8153f3926593a54ecf74f341c119b14e2f559c76393497ad868c0801e97a12d3e9c1bb2c95902d83d25bfa49861237818d9f2b3d16d8211f16f08fa06d3f968aad9037e85c1f79a1b24167dbba27b280881ecfbd5e2e233f73624ee20000000000000000000000000000000000f700"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_BROADCAST={0xa}]}, 0x70}}, 0x800) [ 181.512050] audit: type=1804 audit(1601173196.995:17): pid=8255 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir238767594/syzkaller.NNsrRy/8/memory.events" dev="sda1" ino=15770 res=1 02:19:57 executing program 4: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xd3}) [ 181.828653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.873020] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 02:19:57 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0xa0000000000}], 0x0) [ 181.917340] syz-executor.0 (8258) used greatest stack depth: 22680 bytes left [ 181.947441] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.012493] bond0: xfrm1 ether type (65534) is different from other slaves (1), can not enslave it 02:19:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x12f) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 02:19:58 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local, {[@noop, @noop, @lsrr={0x83, 0x3, 0x3b}, @noop]}}, @info_request}}}}, 0x0) 02:19:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x2) 02:19:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="d800000018008109e02580ecdb4cb9140a440aef0b007c02e87c55a1bc0005008eb3d81fc77948e30500150007008178a800050040003cc00200001203ac040012d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409663e469dab3d164eb54732b76b890000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) 02:19:58 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) pipe(&(0x7f0000000100)) [ 182.295241] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 182.352943] IPv6: NLM_F_CREATE should be specified when creating new route 02:19:58 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000000801010000000000000000000000000900010073797a3100000000040004800500030011000000060002400002"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x80000002) 02:19:58 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0xfffffffffffffeff, 0x0, 0xdbb2, 0x9]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000300)={@any, 0x0, 0x0, 0x0, 0x0, 0x0, "0c21d56fa46a34e9d23a8153f3926593a54ecf74f341c119b14e2f559c76393497ad868c0801e97a12d3e9c1bb2c95902d83d25bfa49861237818d9f2b3d16d8211f16f08fa06d3f968aad9037e85c1f79a1b24167dbba27b280881ecfbd5e2e233f73624ee20000000000000000000000000000000000f700"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_BROADCAST={0xa}]}, 0x70}}, 0x800) 02:19:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x3}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_open_procfs(0x0, 0x0) 02:19:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000000a01010000000000000000020000080900010073797a30000000000900010073797a300000000008000240000000010c00044000000000000000050900010073797a300000000008000240000000010900010073797a30000000008c000000030a01020000000000000000020000000900010073797a300000000014000480080002400000000008000140000000000900030073797a30000000004c0008800c"], 0x1}}, 0x0) r2 = socket(0x2, 0x3, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x3c, r4, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x3c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 182.653490] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 02:19:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x3}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_open_procfs(0x0, 0x0) 02:19:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x3c}}, 0x0) [ 183.068847] bond0: xfrm1 ether type (65534) is different from other slaves (1), can not enslave it 02:19:58 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x16) 02:19:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x12f) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 02:19:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r2, 0x2, &(0x7f0000001740)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000340)="d39b9de7bfa2", 0x6}]) 02:19:59 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) dup2(0xffffffffffffffff, r1) 02:19:59 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0xfb, 0x0, 0x400000006, 0x1, 0x400000000000000]}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x5b, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @rand_addr=0x64010101}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:19:59 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0xfffffffffffffeff, 0x0, 0xdbb2, 0x9]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000300)={@any, 0x0, 0x0, 0x0, 0x0, 0x0, "0c21d56fa46a34e9d23a8153f3926593a54ecf74f341c119b14e2f559c76393497ad868c0801e97a12d3e9c1bb2c95902d83d25bfa49861237818d9f2b3d16d8211f16f08fa06d3f968aad9037e85c1f79a1b24167dbba27b280881ecfbd5e2e233f73624ee20000000000000000000000000000000000f700"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_BROADCAST={0xa}]}, 0x70}}, 0x800) 02:19:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x1, 0x4) 02:19:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}}, 0x0) 02:19:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x12f) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 02:19:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}}, 0x0) 02:19:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x201, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0xf, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) [ 184.230915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.270117] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.330125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.366948] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 02:20:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000200)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @remote}}}, 0x108) [ 184.410197] bond0: xfrm1 ether type (65534) is different from other slaves (1), can not enslave it 02:20:00 executing program 4: set_mempolicy(0x3, &(0x7f0000000040)=0xe4e, 0x6) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @multicast, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @multicast1, @dev, @local}}}}, 0x0) 02:20:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x25, &(0x7f0000000200)={0x100000}, 0x4) 02:20:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x101182) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x101182) 02:20:00 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendfile(r3, r2, 0x0, 0x10008004) dup2(0xffffffffffffffff, r1) 02:20:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6a, &(0x7f0000000000)={0x200b, 0x0, 0x0}) 02:20:00 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0xfffffffffffffeff, 0x0, 0xdbb2, 0x9]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000300)={@any, 0x0, 0x0, 0x0, 0x0, 0x0, "0c21d56fa46a34e9d23a8153f3926593a54ecf74f341c119b14e2f559c76393497ad868c0801e97a12d3e9c1bb2c95902d83d25bfa49861237818d9f2b3d16d8211f16f08fa06d3f968aad9037e85c1f79a1b24167dbba27b280881ecfbd5e2e233f73624ee20000000000000000000000000000000000f700"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_BROADCAST={0xa}]}, 0x70}}, 0x800) 02:20:00 executing program 4: r0 = socket(0x2, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x40000}, 0x0) 02:20:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6a, &(0x7f0000000000)={0x200b, 0x0, 0x0}) [ 185.578475] bond0: xfrm1 ether type (65534) is different from other slaves (1), can not enslave it [ 186.862435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.870533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.879569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.887847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.897681] device bridge_slave_1 left promiscuous mode [ 186.903532] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.916963] device bridge_slave_0 left promiscuous mode [ 186.922416] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.937476] device veth1_macvtap left promiscuous mode [ 186.943098] device veth0_macvtap left promiscuous mode [ 186.948627] device veth1_vlan left promiscuous mode [ 186.954013] device veth0_vlan left promiscuous mode