[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.358633][ T27] audit: type=1800 audit(1581532781.465:25): pid=8566 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 52.389618][ T27] audit: type=1800 audit(1581532781.465:26): pid=8566 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.423161][ T27] audit: type=1800 audit(1581532781.465:27): pid=8566 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. 2020/02/12 18:39:53 fuzzer started 2020/02/12 18:39:55 dialing manager at 10.128.0.26:45087 2020/02/12 18:39:55 syscalls: 2947 2020/02/12 18:39:55 code coverage: enabled 2020/02/12 18:39:55 comparison tracing: enabled 2020/02/12 18:39:55 extra coverage: enabled 2020/02/12 18:39:55 setuid sandbox: enabled 2020/02/12 18:39:55 namespace sandbox: enabled 2020/02/12 18:39:55 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/12 18:39:55 fault injection: enabled 2020/02/12 18:39:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/12 18:39:55 net packet injection: enabled 2020/02/12 18:39:55 net device setup: enabled 2020/02/12 18:39:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/12 18:39:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 18:41:28 executing program 0: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @local}}}, 0x108) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xab, 0x6, 0xdc, "322fd6cfa00f7e61a70c4e113ce4f8bc", "b55702a05ccea5f8341ad63717f13208f2459ba361120dbd1f5b6202b62da4249483b5d078d66cac2ee8d39ac6b49a62e26d7367b3cd0170fe6a01a3c36a6b817b332956d16f0f5503d76da2ba468707bd1f17468852db1c7c3e2502cb7a8ff92e1dcadc9b2c6cfbe6f2abc36bce02eb8121daed457c1da6c6133c405b4b349142840a23849f2c0005f224b35945ef2bae7b690681f2"}, 0xab, 0x3) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={{r1}, 0x8a8a, 0x2, 0x1}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x20201, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x1, 0x1ff, 0x1, 0x3d], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x4, 0x727763e6, 0xfbfbfbfb}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80000, 0x49) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000400)='trusted.overlay.upper\x00', 0x0, r3) r4 = openat(r3, &(0x7f0000000480)='./file0\x00', 0x4c40, 0x10) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000004c0)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x48080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000540)={0x3, 0x0, 0xcf3, 0x7, 0x80}) accept$nfc_llcp(r2, 0x0, &(0x7f00000005c0)) socket$xdp(0x2c, 0x3, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000600)=0x6, &(0x7f0000000640)=0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0/../file0\x00', 0x8c00, 0x40) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f00000006c0)) r7 = syz_open_dev$mouse(&(0x7f0000000700)='/dev/input/mouse#\x00', 0x608d, 0x20400) write$FUSE_STATFS(r7, &(0x7f0000000740)={0x60, 0x0, 0x7, {{0x2, 0x7fffffff, 0xda9, 0x7, 0x3, 0xffffffff, 0x7, 0x9}}}, 0x60) r8 = syz_open_dev$ndb(&(0x7f00000007c0)='/dev/nbd#\x00', 0x0, 0x606100) ioctl$NBD_SET_TIMEOUT(r8, 0xab09, 0x93e8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000900)=0xe8) r10 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r9, r10) r11 = fcntl$dupfd(r6, 0x0, r7) ioctl$PPPIOCDISCONN(r11, 0x7439) prctl$PR_GET_FPEXC(0xb, &(0x7f00000009c0)) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f0000000a00)=0x5) 18:41:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x9d0000, 0x9, 0x0, r0, 0x0, &(0x7f0000000080)={0x98091f, 0x6dbeed3, [], @p_u16=&(0x7f0000000040)=0xde4}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x3, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc564}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f00000002c0)={0x1, 0x0, [0xf5, 0xff, 0x7, 0x1, 0x5, 0x2, 0xcd, 0x6]}) clone(0x80d8400, &(0x7f0000000300)="214f8a7dc729fd514ef52e6ef3b71a35a0cf6b6e22f2908ab99628146b9e71346e9ce2b01f9f78fdf8729f7474445ed4a6501b59dfce73fa7d27d6f28c3758f4a54d34b1e37b43f057781282085e008abb967670a5ce8c9aa31a497760ffddf1a33b355cf24a00248b598458f3438789270bb8638dc93a5e72f1e1e65deaf7690fab5eb9b3445bd288876b9936019ec357f73c180c3fad72ed08e46eca034db70939331421dc76b66f6d0533718d57", &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="499bbfb07a9be675b146026466baeff8432d8d8e8a4a39f9f9da6d44f24977fc5a00026d08db59b68fca6343bc9b425fe5b4bafdb390a7ba4900243d531ada607a38826ae148e15fcbb6b0c13e20a5cd0303ed87a010d61eee76aa3344b19fb9b00d609174f3ca1ee34fb801c6a67c909e9af19fc0041f72cfc3ca1e73b65a246c8e34277288dcc2ba56d16319fe8f0ab836dd92119e4f13bc33e3089863837d92c33f76c7dde4d06997f9bea4fab47306243831b6561e32bf5ff6fcf5a04c26bf5e39") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'ip_vti0\x00', 0x200}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580)='/dev/nvme-fabrics\x00', 0x20000, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x2}, 0x10) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0xa7aa3f2840c29650, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000740)={{0xc9, 0xce}, 'port1\x00', 0x0, 0x1800, 0x1, 0x128, 0x4, 0x1, 0x5, 0x0, 0x1, 0x8}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000800)={@empty, 0x0}, &(0x7f0000000840)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000980)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x4e23, 0xfff, 0x4e22, 0x94fd, 0xa, 0x20, 0x20, 0x1d, r6, r7}, {0x101, 0x8, 0x400, 0x800, 0x6, 0x1, 0x200, 0x7}, {0x8, 0x4, 0x5, 0xfffffffffffffff8}, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d3, 0xae}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3501, 0x0, 0x2, 0xcf, 0x7, 0x7, 0x7ff}}, 0xe8) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/nvram\x00', 0xc5380, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) ioctl$void(r4, 0x5451) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f0000000c80)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/net/tun\x00', 0x4400, 0x0) fdatasync(r10) r11 = accept$inet(r3, 0x0, &(0x7f0000001500)) ioctl$sock_inet_sctp_SIOCINQ(r11, 0x541b, &(0x7f0000001540)) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r12, 0x4010ae42, &(0x7f00000015c0)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) io_setup(0x2, &(0x7f0000001600)=0x0) r14 = syz_open_dev$video(&(0x7f0000001640)='/dev/video#\x00', 0x52dfcf8f, 0x200) io_cancel(r13, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0x800, r14, &(0x7f0000001680)="c15491a770e39b57478a886181e6ad6865bf07d95b4c5f30a59da0112d2f84b84bd2d5f027d297ba18d8c53d9245d55d7b17e2e74b5a212aaf3a07b52ea294258db33be548dfbe5194183358ace883b819cc8cad3981b0861ac11e9107a9cd2c81a16e0e945675a285d5437c109fb0510b1634fdd4aa4372f3db5e520bb35a664daea7d92ee99904a56b26052e97ee383e86822477a3f601dc451cac687d1ca038e207b889efe723d82794898373db80e30a94c3fa326a8101a0b09363410997377f89c106ce0a62c36142de4e22213e784b2291df1150205a7e2f47c027", 0xde, 0x1ff, 0x0, 0x6}, &(0x7f00000017c0)) syzkaller login: [ 159.682651][ T8731] IPVS: ftp: loaded support on port[0] = 21 [ 159.798656][ T8731] chnl_net:caif_netlink_parms(): no params data found 18:41:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1ff, 0x6, 0x1f, 0x6}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x801, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x80, @rand_addr="035e402915eed7d8d6d982533c2d117f", 0x7}}, 0x9e59, 0x1ff}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1ff}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x8}, &(0x7f0000000340)=0x8) r3 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x200001) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x3656, 0x20}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r4, 0xff, 0x4}, &(0x7f0000000480)=0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000004c0)={0x1, 'bridge0\x00', {}, 0xc6}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000500)={0x56, 0x2, 0x0, {0x1ff, 0x2}, {0x7, 0x5}, @const={0x9, {0x4, 0x3f, 0x200, 0x5}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x40) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000580)={@multicast2, @multicast2}, &(0x7f00000005c0)=0xc) msgget(0x2, 0x8) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000640)={0x6, {0xffffffff, 0x6, 0x1000, 0x4}}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcsu\x00', 0x600000, 0x0) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f00000006c0)={0x2f, 0x3}) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000700)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000008c0)={0x0, @can={0x1d, 0x0}, @l2tp={0x2, 0x0, @loopback, 0x1}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x1}}, 0xffff, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000880)='bridge_slave_1\x00', 0x8, 0x6, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000dc0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000ec0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@getsadinfo={0x5c, 0x23, 0x20, 0x70bd26, 0x25dfdbfb, 0x0, [@lifetime_val={0x24, 0x9, {0x100, 0x3a, 0x6, 0xff}}, @offload={0xc, 0x1c, {r9, 0x4}}, @offload={0xc, 0x1c, {r10}}, @mark={0xc, 0x15, {0x35075c, 0x80000001}}]}, 0x5c}}, 0x88c) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000f00)={0x0, 0x0, {0x4, 0x8, 0x6, 0x8}}) r11 = syz_open_dev$vcsu(&(0x7f0000000f40)='/dev/vcsu#\x00', 0x0, 0x80202) ioctl$UI_SET_FFBIT(r11, 0x4004556b, 0x60) r12 = accept$packet(r0, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000fc0)=0x14) r13 = syz_open_dev$ptys(0xc, 0x3, 0x1) r14 = fcntl$dupfd(r12, 0x406, r13) r15 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/mdstat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r14, 0x84, 0xd, &(0x7f0000001040)=@assoc_id=0x0, &(0x7f0000001080)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r15, 0x84, 0xa, &(0x7f00000010c0)={0x5, 0x4, 0x200, 0xd0, 0x0, 0x100, 0x6, 0x34, r16}, 0x20) [ 159.888533][ T8734] IPVS: ftp: loaded support on port[0] = 21 [ 159.975316][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.982391][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.003925][ T8731] device bridge_slave_0 entered promiscuous mode [ 160.024619][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.032064][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.041121][ T8731] device bridge_slave_1 entered promiscuous mode [ 160.100908][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.114404][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.125123][ T8739] IPVS: ftp: loaded support on port[0] = 21 [ 160.172939][ T8731] team0: Port device team_slave_0 added [ 160.182486][ T8731] team0: Port device team_slave_1 added [ 160.189487][ T8734] chnl_net:caif_netlink_parms(): no params data found 18:41:29 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x735, 0x600000) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x68042) write$sndseq(r0, &(0x7f0000001100)=[{0xd0, 0x1f, 0x0, 0x7, @tick=0x6ba29074, {0x7f}, {0x5a, 0x2}, @queue={0x0, {0x80000000, 0x9}}}, {0x6a, 0x2, 0x2, 0x6c, @time={0x3f}, {0xfe, 0x3f}, {0x2, 0x20}, @queue={0x8, {0x5, 0x8}}}, {0xf7, 0x1, 0x3, 0x3f, @tick=0x9, {0x0, 0x1f}, {0x1f, 0x4}, @quote={{0x0, 0xcc}, 0x1000, &(0x7f00000010c0)={0x1, 0x80, 0x0, 0x20, @time={0x5, 0x2edd}, {0x81, 0x2}, {0x81, 0x8}, @quote={{0x40, 0x1}, 0x101, &(0x7f0000001080)={0x5, 0x6, 0xee, 0x5, @tick=0x1, {0x5, 0x3}, {0x4, 0x7}, @ext={0x1000, &(0x7f0000000080)="943d02151dd4ba159f7ff50ae86b8583b86f12e7f042fe4e90ff22bc3cfed11e4dd19a2b1dc4f130e39decefd76c1ff79ff5de9bbffc03d26ceb49d51c95a928d7e9142b2b68bd1df60c08de7917f268155345df3a9460d1a769dfdbc90d3124afeb15cec984b1082b48c0b5440ffd8d266c337a58dcc05f2414cf06720cdd3d8ac9cba0d2aa8139f94469be598ae99b18e7b5b72e26e7a6f782cf6264ce9b1781eae964b7fecb9c3af17535e5207e842f6c0d4cb07ffabb8b4d788879607573e02e30dbc1a4c00b7e508ffd864bf1be2f3088613d40e3723d2e133388c74b1e453a379823b39c361c1ae17d2ddfb24ec0cd6a452407731733ad47ec48fb28d966056bfc12e739d45ef215394ff705c88a67b9b80c7a37d8687016796bf72d691a9c60b5fafb162e911a4cc2d7f6e937a8d6428db943eb241ff916fd002089d2a3c3b62fc40db2fa5feca7bbea01e247b3e088c7d6abccc62ccf24d1e8ecf847cf3a22017d9d4697c96d6e17ba8ce43a2ce8a87c0f41ecc2d337affa7e71a23fdb6796433cf818825804b1b7fc137239284f042bb5e40e6a66f11a44a1b296a2fb7c85298fa8686c1104a248ee7300e31b532c21137b020493375ad48a368416118d14a706a6f6811f27e0de20d0e4a6fad0658938709d8018c5f1c1d713363948e4729354edb4e394d3fb3fbe6ad78aae477677aea4248d331d614ba8d4c967bf16ae283a78cb40e2469f87f590497a0c6af050b1ae10ae0e2dd90f235e2bb3ab86a3c03be21dfded8727689c218cc3c8a728754a02fe9fd48ba8c18266345701d0e5369a37be0fca9889a57c27c9678ce69b0d006fef5d1772683edc94b87684b6f6a69b90c06c4521d90d3c6e70b1b6e22213437cecd696ec29ab158caa320cc613c6400071d05fc02786669e684134ba03553f3fca856ea2d9cd4ca53c49233c7b2f94720105766ecf945b941babf5405bbfbeef7a0fd5f1e06b561f97b0ce3122f6a5c4832d4d54ed9ee388c3ab8344086c84c6051a95ee2d53eafe0d6e70c5713834b9aa97c582844a4cc0ae4f20fd9ba1b93b93ac6663365f0e5982597597ac2d7679415f7fa953476c2758f8d3cc625ea73534568e5ace18e76a0429a93c46b1f471ba8efe9d2a5f5b151c5ae333e8e1011f555a2b00bbb02fe740d1fdff3f4c28e7391bb9b508d5a135b5f4246b160a3d0e4ff2bd1284d2a1a5012f6df8e3adf539444e4f2dabb836e25d43dd3e6e0220d36829dc5c9a440469d78a4d17971c0f59ab7ef1e3af01a2ffc353084e54cd092c2591c975bd27a6f0710c05ebe9c763f1392a71155dc4cf2fedf029ab0451db60382ed49b40b88154dceae61841d95d0486447d44089af83b5ac39876ad313792875664fc4e6b0f85c79f13198744659c495e1e46a52a675c3736be75f0261c43231088dfc726fde262aacba6262a4a22a7a5b008ac25d20f3c9dada2b8bfa9787dd597d97dde7df13e6986e87468049eb6537d6f38eee8cc11fefa0fc67e2292f2d354f05f0173914e643f56c63cceb602e92e2740791a0772ee197377edf04d756d391b01b1a96a9c740bd3945082084f31385c997a62ea1f0d995d49945c05e8527b293dcf16619509ca81feaae53dd056b103c43766902c9f32768de21f0ef97f099aa53167d657c423ee84ee04c73cef29521b3a4f7058fdf3a0f8ea37534e519cda54395988a572a61f519fe29ccc7e4fada87c26f20593cd082b85564adb1d30a7f01e26a26d6789ac3dee31a862e6178c83b50a78c7fb59166ec7843022b700f814f2d0a3a55a7339a484981e489a7f587422ba188e58eb2766e41ac4317d969174034469bf0acfcf985e842ca5cb2984786166419cc1ad8e55f82f0ab84c41abc322edf63b82c36b47fa38cc29b756d83aabc222e16f62daf780786262694d64864fd39c61e885c6a1ed6732acf4168c626ed8026370416e313c86b75edd8c067481e56714c94adf0f3d051694e7f0a68998e432bc793cb26200c93a98fc576cb3f41fa7622a9e71c2b5c9582ab335116f46671dcb7c3039f8c2fc53b9f901ae24bcdf509fc5f5d64eed247ba19e7e48928b1bb6cb83b0152272724bc5a9daeaf2ade6fe7d52ab64253bdf01c8cd01dfa8921deaf676b5dd79461b56392b5cd4b429a57b85cde742ddd1b8be5b94cd5dbde421bd93cf06778a80e5d14d1c35bf10f676970374702d00c3e9a108afc29f2b6c3e9f2d57817c00cff00b830ac778f088e72de0afda35d3ba957968d792e6d52a7f242cf9f7b491643e5cddb1971dfe378e25ccac15880541a220071371f989595e0f3a0e8a3e864a65e50843ce936ae05f176be959b5d735da3d0adc4dc5f55d4df7650ed8105e31cff7e9e8d74fa7fc2a3397fbd003ee31b6cc24c62398e6cefc92957c9d165fb3023fc563ce37c319b10392d64fc48a7bca4b85f1559b2887a7fe5e39233e6aaaf30ccd1dc7bb17a8edb1bf9505afbf08af42a176ad9f22593e139dafc938464549d881d167a711106874ae1a643acc7d0e5746637e780e039afd78786ee02c1524070ff76e2296166cc7303aef58166d1cb24f9ccade3c37e97c2ad07d9cb2570ec5bf3957b2bd520fac06b703be6b327853f29a964a2dfa00af2939c648fc57ebb73169d0a7d8a5cd257f9f329c392a8286f65c090b40b9501d7db8d37b6d1f06d49d9ea4e6fccec31e1a09dd229c0a770bb032c846f5d022fcd81977aeae073f93894b8710e8e2548879297a200b96fef9af3fc111fb691e0ba3f9d6c78467931835712ba9e7ba6b5d7a1b423e03c6e6af33dcf031a59c1b1474d34580011132292911f8ca1c0eeebbc8a819327c70c187f3bdc35054fcdba92bfc4868af8943483ff9e361934100a03d3c218bee109d738bb7e3d7ed782d34f0df535dfcc9d1c7514811a235ed5439c36e4ebcce5090c6a58e4000adb2cd374ae14f12ca89b8e15b2a87bd8b233666ced534a2d89258d692c018ff44db3c0622bc957d058688b27e4f6f4b74d376857c107ca41ab516464bfec68e8cf96361f48616bd1c1efccfa32c1b1a02b7505391eee5d43f56c00f845f3ed0533b6ef0759c86def28d16fa1577aab8cedcfe02acb24e4b684380a86a1c325d3a6707808171dd0b8449f3dbaa465cc049898febb7b981db0926879b2ba76ab50346c9a66c055ac88969abeef3016f5b1205b387fdcd891cb6db4e3c0677d7ed28690554c9a0b977644c68aa70cb0d6b4c7e2f72a5fb0037996655670f6291ca2f8fd4961cdb52803ff04f63d75aeea6f09f7cbf0b40a4ded8c61556b9a7e33a2adcecb272e6adb967c15d5ee46c4a57a89a648dcd50900e1b7acc5a5808c9aa17ca36d316970e7be8216adaa7fa672a10ad50eb2087f661fa13ddcf15fdc77d4e0ed0eefeeaf0a9b93fbc253eb9215da4f8c1939be4de2d2a38d04c6c6e0a5852eb337b230f8b982b4e1b8048db12fb2263e774a7795af1116be00895acc2d8b3cf8c273c72fb4ba353fbb1113bc40a02088c8620b40d173607d0e937b3529c7999a60da38b34effb0ffb243ad08d6784c664e4b04a28f7d300745b20bb48652c34028ba0757b3723f66ed7888d87bfcf7cf17f7d43c0c50e624517ea32dd08d56b89d26b7cc2849e2d7e8ad83a0c79849bed4eb25f1a564625a0833fc78c94430bb3f09350c0a5f00bf03f68b172ff491897b45b8b192a2a2849511ca7bd9e5383448f8a15b840975ec30b533c695cec186a74103723fc8b8695f6918bd155a23de140cb74e5f32bcbda2f1727a0fc6ba347945d4da7befa490662b47ebace10722f0b74eaf7a9b6e21a2c77f42b967b8851015058b2632a8424ae4061db56d75f690a313cf66077991d5f5704f736ab29550837b8161600b99947b0d8c950046569810d3771293633d7731553cd5453caec38fb885f7446bc1e7f8479a0e1a2f2b6da8036281b84e9fb8ad3cb7416422a36ae3eefc0e47ba49ed9f4baebc227d6fd73f05b4f450e013def5e47f226926457418bed57ccab25c9aa3243f00fbf4e4159540c27a3c0f1139385af229e9af693b1be1c6c76803e48f6b63f9f9b694e6c615514037d7692d3ba1d29130a1c83f6e98a8a4c51a7edc6d26de50799ecc0ae875062b762eddbe96d517f31c1f41ffdec806f52beba402294d6fa62cad85756ba7a0b070f8057a8eacffed562687400fd5c05f91224823d7235409f4260b15b68995ed39a85945ecca8a88beb04274a8992279ef1735569335c1f8246457c1853f32861cf55bcdfd700d2366e48c5f90466ec649b61078044e11fab1f408745104887208bc3623c675a9674c24589675e53db28398665f2903695a327e6ce5173213a3a63387756b015b8c4edcab35d1d27fd72864cdfea75a3b0e46cc03971fbccc0dc52dba649047ac0aa74d52332f1a37c04fba4344d334ecd154ed29c8233263a548f6def16d0843dff6f175bcdeaa516d911e0bcaabdecfa32e876a55661654c0feb7f26789e0d795e8c35da0f61e66ab9fe878d5f2935dd1475cda810903d411443c9aa7f8a4648faabe3700cb14693353138c9a9c4928c9c29e6ad038a1214469171e78d90af9f9d8b5acb266c9fbd5b5f201b8bef577afe2e29e66815fe771bc9bd4e84805bfc1bede98d1075a19be75c195b1e9355baa046e178d16eef5d951a7e7b33f7380db626a792889668faeb4b0fe7107dc836ed4b21ae94989b4a3b9fd3a4c449952dcc4f513bd7892c37503a1cd1be0688de08c95333356a549827a8ba235200c871053836ad726d842c35220efa25ce7d1aa14c678cfdb328cc9788e4a0be20ffc3e35779094ac123e71ed0330bc80a8b6f00264515cfbe45f45be8121dac0805de21c44ccde7e24fbd19ba1049d0aae2fd891dda7633636e0e0e79f09b20e4d9587bae6b6059ceada9b8958111a035c9e5e463fa4fd162c64911acc40b84c6eea596b9acdd968d155f66ee7e37b9fb75b6388a4b095376cf5720483b0a88dc6f893bf34d27d3e8855035d50adfe25b7abdc6f44540478b80a8aa67b3c246ed922b1d09bae1752d74e96fba9dbbee6837d75016d803fa22f53c9470df6eb3b9255422f2726c3826c03a3caff53cd72168177311cc698fcab18d07a6f7fca9bfd9be4d518e4c389b56b93488af3a673420749045bf7bbdbaf4a5b8f8854a618064f2dde6d6ceeb518e50061deed631f5b6a2eaca25ca7c6cfb5d4a564789bcddc3505ccadaa333f6bbb87ba8c8fd934fb9e94ae1febec8b3a32c10f4615a4d4b6a8c725f400d68d7df7209b2ae3dcf6fb1efa74e4aee9480080239258598e22573c854fcbfc83a7778a05af1686ec970c0208d0c5f023ffcda244ae514f6d5c775d3426d645b6b3ae18855a7d59a34beb983fe099b5db8102a9a93ff7f896928a47568a96551f18d1fb6d9e2315d86d87a2f5404b6bd6b8841ba7be0a22b4c9d07d563aae1ff6f99e0509cb58c6b5e0b3323824bd8db82369edb03f9fd7abd321e84045d9edddf306598ea2102168fff7a79052ec960ba28f8ecd4b304e331a041d69a38d7481126b5dff0c8e095c72ab6523dfe956b66869bcaf0dac1b220c62282f23b05fc53a8a34b986728069045bccc19affe0f0e888fe26035cc1afd5bc0be21818e702b4cdfd84f1eef8728ca650cd9d9eb3ec190a377faee526d5ece329546205795afb76727d36d314ea36d9473ef9a118e867f6bd4896d0e1477ce4ee1e4dada46e58ebaf3df5b2ee4a1b8c4fef01de498bed948ef024543f67e0d1635316969f52c66bae2"}}}}}}, {0x40, 0x76, 0x0, 0xa7, @time={0x5, 0x3fb}, {0x1f, 0xe0}, {0x40, 0x20}, @queue={0xfa, {0xffffffff, 0x9c}}}], 0x70) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000001180)) socketpair(0x6, 0xa, 0x7f, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x128, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d47}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x19}, 0x54) openat$drirender128(0xffffffffffffff9c, &(0x7f0000001440)='/dev/dri/renderD128\x00', 0x20000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001480)={0x0, 'macsec0\x00', {0x4}, 0xff}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/nvram\x00', 0x801, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000001500), 0x4) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000001540)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001580)=0xfffffffe) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000015c0)={0x8, 0x5, 0x3, 0x10d}) r5 = socket$inet(0x2, 0x4, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001600)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0x9, @remote, 0x7fffffff}, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}], 0x48) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001700)={0x9d0000, 0x7fffffff, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000016c0)={0x9a0918, 0xfff, [], @p_u16=&(0x7f0000001680)=0x1000}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000017c0)={&(0x7f0000001740)=[0x3], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x174f, 0xe0e0e0e0}) r7 = add_key$keyring(&(0x7f0000001800)='keyring\x00', &(0x7f0000001840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r8 = request_key(&(0x7f0000001900)='pkcs7_test\x00', &(0x7f0000001940)={'syz', 0x0}, &(0x7f0000001980)='syz0\x00', 0xfffffffffffffffb) keyctl$search(0xa, r7, &(0x7f0000001880)='.dead\x00', &(0x7f00000018c0)={'syz', 0x1}, r8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000019c0)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r9, 0x894c, &(0x7f0000001a00)=0x7) socket$l2tp(0x2, 0x2, 0x73) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000001a40)=0x3) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$BLKTRACESTOP(r10, 0x1275, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001b40)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x140, 0x230, 0x230, 0x350, 0x140, 0x440, 0x440, 0x440, 0x440, 0x440, 0x5, &(0x7f0000001ac0), {[{{@ipv6={@loopback, @remote, [0x0, 0xffffffff, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff], 'sit0\x00', 'wg2\x00', {}, {0xff}, 0x87, 0x1, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x68, 0x80, 0x1}}, @common=@dst={{0x48, 'dst\x00'}, {0x6a12, 0x4, 0x1, [0x6, 0x9, 0xff1e, 0x7, 0xcf3c, 0x629, 0x1, 0x85, 0x8, 0x0, 0xc5c8, 0x100, 0x9045, 0x6, 0x7, 0x7], 0xa}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@mcast2, @mcast2, [0xff, 0xff, 0x0, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'ipvlan0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2c, 0x0, 0x4, 0x9a8f907dbef2d7ca}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv4=@rand_addr=0x7, @ipv6=@rand_addr="78e05a19ecf56d218f87a8c118851dc6", @gre_key=0x200, @icmp_id=0x64}}}, {{@ipv6={@rand_addr="68b509314227ccbedf7c8b4bde98f1dd", @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xff, 0xff000000], 'xfrm0\x00', 'wg0\x00', {}, {0xff}, 0x67, 0x81, 0x0, 0x40}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x33, 0x1f, 0x4, 0x7f, 0x9, 0x8f, 0x6}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@mcast2, @ipv4=@multicast2, @port=0x4e22, @icmp_id=0x65}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x2c}, @local, [0xff000000, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], '\x00', 'wg2\x00', {0xff}, {0xff}, 0x2f, 0x36, 0x5}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@local, @port=0x4e24, @icmp_id=0x67}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f00000020c0)=""/92, &(0x7f0000002140)=0x5c) r11 = syz_open_procfs(0x0, &(0x7f0000002180)='net/ip_vs_stats_percpu\x00') r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r11, &(0x7f00000023c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002240)={0x104, r12, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff3103}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) [ 160.241334][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.250287][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.278420][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.317368][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.332851][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.384691][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 18:41:29 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="512e278c0bfeea989885b7b7b7cd9c92706e2afd2140e9e52498bd295ec8d8d0b59cc8c1621569c26e51889dad10136e64e1cf15953816722486ae3c524e6934934960a57c932f007833d86df3bd4821c84edb89c27991a9a6509966439dd33174c566c154a68a7f8250d0ac9c551582cabbf5a62ddafd4c2658fe2a255dbb99323bd5f973cb301fa709e2ba1f940b114061abdd037118e24c0ae22327c3cca5ebb9f96f1f13d426fec46d1bc8a4df76a9e25c898cec28d0d9ade46748308854a6d080c69b094ac08cb728148891a107", 0xd0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000200)={r1, 0x86, &(0x7f0000000140)=""/134}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x100, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000580)={0x2, &(0x7f0000000440)=[{}, {}]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x20000084) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000780)={{0x7, 0x5, 0x0, 0x400, 'syz1\x00', 0x7f}, 0x6, 0x400, 0x6be0, r4, 0xa, 0x7f, 'syz0\x00', &(0x7f0000000700)=['/dev/sequencer2\x00', 'eth0.\x00', '/dev/bsg\x00', '+wlan0\\)\x00', 'vboxnet0\x00', 'eth1[*\xe1-bdev-@-+^eth1}\x00', '/dev/bsg\x00', '/dev/sequencer2\x00', '/dev/sequencer2\x00', '\x00'], 0x72, [], [0x3, 0x3, 0x3, 0x7f]}) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000008c0)=0x300, 0x4) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x105001, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000940)={0x0, 0x97, "949d05b4a13147b32a7518417c66bd929d8fb35001435cd2950bc3197e073a30a9dd9a314fbe3afa72954763272f0e5079fc1973dc03c1f8a595c09baa06a0adaa40b774e5158f3d0aa2575d502d8922f68bcee7418454c13efa3de0c26970ef2408c4eb935cc2b5f03d07d01b76c29f48042cdaed3f7bf2bfc4cbf74c254e4d71bd6c26b5ea69c15b579287ced55540585ae744605c46"}, &(0x7f0000000a00)=0x9f) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000a40)={r7, @in6={{0xa, 0x4e23, 0xe0000000, @dev={0xfe, 0x80, [], 0x40}, 0x7}}}, 0x84) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000b00)) r8 = dup3(0xffffffffffffffff, r5, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001b40)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000001bc0)={0x1, 0x10, 0xfa00, {&(0x7f0000001b00), r9}}, 0x18) r10 = socket$caif_stream(0x25, 0x1, 0x5) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f0000001c00)) r11 = syz_open_dev$vcsu(&(0x7f0000001c40)='/dev/vcsu#\x00', 0x2, 0x14000) getsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) r12 = accept4$tipc(r2, &(0x7f0000001d00), &(0x7f0000001d40)=0x10, 0x80000) tee(r11, r12, 0x100000000, 0x0) r13 = syz_open_dev$mice(&(0x7f0000001d80)='/dev/input/mice\x00', 0x0, 0x440203) ioctl$BLKRRPART(r13, 0x125f, 0x0) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000001dc0)={0x4, 0x4}) r14 = syz_open_dev$vcsu(&(0x7f0000001e00)='/dev/vcsu#\x00', 0x3ff, 0x111841) ioctl$VIDIOC_QUERYCTRL(r14, 0xc0445624, &(0x7f0000001e40)={0x4, 0x8, "2ad012a37159a580c9faeb697ac5365d1b2ac295b2d1fbf5d8c5da8cbd1bda52", 0x8001, 0x80000001, 0x188, 0x6, 0x40}) [ 160.537584][ T8731] device hsr_slave_0 entered promiscuous mode [ 160.603255][ T8731] device hsr_slave_1 entered promiscuous mode [ 160.663110][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.665510][ T8747] IPVS: ftp: loaded support on port[0] = 21 [ 160.670231][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.688000][ T8745] IPVS: ftp: loaded support on port[0] = 21 [ 160.705473][ T8734] device bridge_slave_0 entered promiscuous mode [ 160.714439][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.721480][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.731299][ T8734] device bridge_slave_1 entered promiscuous mode 18:41:29 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x59, 0x2000000, 0x9, 0x5, 0x1ff, r1}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0x3, @output={0x1000, 0x0, {0x3, 0xffffffff}, 0x8, 0x8}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x10000, 0x5, 0x4, 0x8, 0xffff, {r3, r4/1000+30000}, {0x2, 0xc, 0xe, 0x4, 0x48, 0x81, "353d8d1e"}, 0x8001, 0x1, @planes=&(0x7f0000000240)={0x3, 0xeab, @fd, 0x7}, 0x5, 0x0, 0xffffffffffffffff}) write$P9_RREADLINK(r5, &(0x7f0000000300)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fb0\x00', 0x200, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000380)={0x1, 0x101, 0x1, {0xda, 0x7fffffff, 0x7, 0x1}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000003c0)="8685ff83df50408fcdae99dc601a5c49", 0x10) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000480)=0x78) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x280000, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000540)={0x1, &(0x7f00000004c0), 0x2, r7, 0x6}) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000580)={0x1ff, 0x10001}) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f00000005c0)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r9 = syz_open_dev$video4linux(&(0x7f0000000600)='/dev/v4l-subdev#\x00', 0x7, 0x101201) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000640)={0xc, {0x8, 0x8, 0x9, 0x9}, {0x1, 0x5b17, 0x2, 0x8}, {0xc000000, 0x401}}) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000680)={0x2}) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000740)={0x9c0000, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0xa20933, 0x3, [], @value=0x9}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000800)={0x0, 0x7, 0x9, 0x5}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000880)={r11, 0x6}, &(0x7f00000008c0)=0x8) setxattr$security_smack_transmute(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000980)='TRUE', 0x4, 0x1) getsockname(0xffffffffffffffff, &(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f0000000a40)=0x80) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000a80)=0x48, 0x4) [ 160.846108][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.865952][ T8739] chnl_net:caif_netlink_parms(): no params data found [ 160.900754][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.044968][ T8734] team0: Port device team_slave_0 added [ 161.063594][ T8750] IPVS: ftp: loaded support on port[0] = 21 [ 161.084831][ T8734] team0: Port device team_slave_1 added [ 161.103157][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 161.112881][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.119929][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.129090][ T8739] device bridge_slave_0 entered promiscuous mode [ 161.140335][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.147890][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.155571][ T8739] device bridge_slave_1 entered promiscuous mode [ 161.173263][ T8747] chnl_net:caif_netlink_parms(): no params data found [ 161.198983][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.206593][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.232698][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.249632][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.256691][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.285228][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.296636][ T8731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.368367][ T8731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.420162][ T8731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.478856][ T8731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.542984][ T8739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.586366][ T8739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.608540][ T8739] team0: Port device team_slave_0 added [ 161.621712][ T8739] team0: Port device team_slave_1 added [ 161.627930][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.637397][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.645337][ T8745] device bridge_slave_0 entered promiscuous mode [ 161.715528][ T8734] device hsr_slave_0 entered promiscuous mode [ 161.753337][ T8734] device hsr_slave_1 entered promiscuous mode [ 161.793006][ T8734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.800787][ T8734] Cannot create hsr debugfs directory [ 161.816990][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.826528][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.834254][ T8745] device bridge_slave_1 entered promiscuous mode [ 161.875686][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.883236][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.891190][ T8747] device bridge_slave_0 entered promiscuous mode [ 161.899208][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.906377][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.933454][ T8739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.946834][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.953826][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.979872][ T8739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.993668][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.005834][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.020406][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.027995][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.035942][ T8747] device bridge_slave_1 entered promiscuous mode [ 162.058427][ T8747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.090763][ T8747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.115290][ T8745] team0: Port device team_slave_0 added [ 162.174472][ T8739] device hsr_slave_0 entered promiscuous mode [ 162.213086][ T8739] device hsr_slave_1 entered promiscuous mode [ 162.262949][ T8739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.270523][ T8739] Cannot create hsr debugfs directory [ 162.286391][ T8747] team0: Port device team_slave_0 added [ 162.296857][ T8745] team0: Port device team_slave_1 added [ 162.303995][ T8747] team0: Port device team_slave_1 added [ 162.363321][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.370291][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.396473][ T8747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.427628][ T8750] chnl_net:caif_netlink_parms(): no params data found [ 162.437211][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.444641][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.471394][ T8747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.485630][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.492577][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.519966][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.535256][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.542203][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.568368][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.695474][ T8745] device hsr_slave_0 entered promiscuous mode [ 162.753168][ T8745] device hsr_slave_1 entered promiscuous mode [ 162.812984][ T8745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.820541][ T8745] Cannot create hsr debugfs directory [ 162.865340][ T8747] device hsr_slave_0 entered promiscuous mode [ 162.903308][ T8747] device hsr_slave_1 entered promiscuous mode [ 162.943041][ T8747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.950622][ T8747] Cannot create hsr debugfs directory [ 163.065168][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.072293][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.080388][ T8750] device bridge_slave_0 entered promiscuous mode [ 163.091125][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.098399][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.105990][ T8750] device bridge_slave_1 entered promiscuous mode [ 163.126745][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.161764][ T8750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.175351][ T8750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.205517][ T8734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.250796][ T8734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.317194][ T8734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.368878][ T8734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.430083][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.438209][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.459866][ T8750] team0: Port device team_slave_0 added [ 163.468044][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.501777][ T8750] team0: Port device team_slave_1 added [ 163.511908][ T8739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.534677][ T8739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.569022][ T8739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.614940][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.624179][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.632497][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.639655][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.647527][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.675069][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.682028][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.708575][ T8750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.720669][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.727724][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.754249][ T8750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.765751][ T8739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.807613][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.819085][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.827437][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.834502][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.842092][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.850993][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.859420][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.868325][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.877427][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.905446][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.914531][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.005135][ T8750] device hsr_slave_0 entered promiscuous mode [ 164.043647][ T8750] device hsr_slave_1 entered promiscuous mode [ 164.083395][ T8750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.090972][ T8750] Cannot create hsr debugfs directory [ 164.107134][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.115604][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.124442][ T8745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.166051][ T8745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.232491][ T8731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.265721][ T8745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.297046][ T8745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.344913][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.353491][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.362196][ T8747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.423413][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.435969][ T8747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.465149][ T8747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.528124][ T8747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.605700][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.628803][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.642199][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.650486][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.658577][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.673042][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.706128][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.716219][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.724828][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.731863][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.739903][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.782924][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.791419][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.800942][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.808051][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.816364][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.825307][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.835563][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.848807][ T8750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.911112][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.920157][ T8750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.964704][ T8750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.016127][ T8739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.042486][ T8750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.067387][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.076826][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.085546][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.096118][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.104638][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.112745][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.121465][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.129815][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.138615][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.150676][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.163058][ T8731] device veth0_vlan entered promiscuous mode [ 165.179165][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.187439][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.198243][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.205943][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.224313][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.239017][ T8731] device veth1_vlan entered promiscuous mode [ 165.248441][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.280846][ T8739] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.290154][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.298069][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.306128][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.313885][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.321378][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.329256][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.339783][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.365973][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.383051][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.391517][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.400364][ T2705] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.407452][ T2705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.415482][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.425204][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.433835][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.440864][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.448422][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.456188][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.464176][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.485273][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.505337][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.512450][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.521637][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.531372][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.540680][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.549191][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.557778][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.572671][ T8731] device veth0_macvtap entered promiscuous mode [ 165.585995][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.594498][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.602707][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.611366][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.619784][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.628209][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.636760][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.647754][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.654836][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.662749][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.670842][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.701952][ T8739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.713478][ T8739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.728220][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.737731][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.746378][ T2705] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.753471][ T2705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.760919][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.769769][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.778205][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.785287][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.793086][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.801481][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.810478][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.818718][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.826886][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.837700][ T8731] device veth1_macvtap entered promiscuous mode [ 165.862940][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.871202][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.879541][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.887417][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.896666][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.905405][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.912511][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.920367][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.929301][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.937519][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.945661][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.953833][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.964540][ T8734] device veth0_vlan entered promiscuous mode [ 165.983889][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.995315][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.004506][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.013417][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.021869][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.031406][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.048271][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.062465][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.073270][ T8734] device veth1_vlan entered promiscuous mode [ 166.079970][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.088017][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.096636][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.105574][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.115894][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.125239][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.132671][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.140334][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.150119][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.169683][ T8745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.180556][ T8745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.194694][ T8739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.214676][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.222585][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.233174][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.241347][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.249737][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.257992][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.266433][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.274675][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.283154][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.291338][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.299349][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.320469][ T8750] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.352102][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.360430][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.368576][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.376983][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.384578][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.393270][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.401469][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.408531][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.416129][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.424770][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.433328][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.441432][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.450300][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.458566][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.469042][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.513749][ T8747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.529011][ T8734] device veth0_macvtap entered promiscuous mode [ 166.537589][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.586990][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.595624][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.604740][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.613481][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.621671][ T2707] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.628740][ T2707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.636442][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.645108][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.653334][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.661148][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.669063][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.680518][ T8734] device veth1_macvtap entered promiscuous mode [ 166.699253][ T8739] device veth0_vlan entered promiscuous mode [ 166.734482][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.742267][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.755928][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.768430][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.778597][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.799900][ T8739] device veth1_vlan entered promiscuous mode [ 166.839310][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.870089][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.882425][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.900141][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.909112][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 18:41:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pipe(&(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 166.929787][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.950538][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.968644][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.985861][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.994349][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.002463][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.010817][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.019040][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.027123][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.036094][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.045120][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.052491][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.067941][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.080375][ T8745] device veth0_vlan entered promiscuous mode [ 167.095722][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.107800][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.119321][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.128568][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.137072][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.145919][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.154104][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.162129][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.171186][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.180348][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.188306][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.216709][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.225229][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.241803][ T8745] device veth1_vlan entered promiscuous mode 18:41:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) [ 167.269980][ T8739] device veth0_macvtap entered promiscuous mode [ 167.314721][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.322709][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.339372][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.349219][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.360394][ C0] hrtimer: interrupt took 35856 ns [ 167.361070][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.379166][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.466641][ T8739] device veth1_macvtap entered promiscuous mode [ 167.491220][ T8782] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 167.589787][ T8747] device veth0_vlan entered promiscuous mode [ 167.606019][ T8783] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 167.629320][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.638096][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.650272][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.661864][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.672175][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.683201][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.694817][ T8739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.706743][ T8745] device veth0_macvtap entered promiscuous mode [ 167.717886][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.726441][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.735138][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.756003][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.779487][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.794817][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.804265][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.815796][ T8747] device veth1_vlan entered promiscuous mode [ 167.828374][ T8745] device veth1_macvtap entered promiscuous mode [ 167.838680][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.853749][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.862114][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 18:41:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) [ 167.904480][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.915440][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.928907][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.944748][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.956811][ T8739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.986133][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.998337][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.016025][ T8800] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 18:41:37 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xaa, 0x1ffffffe) 18:41:37 executing program 1: socket$packet(0x11, 0x3, 0x300) socket(0x2000000011, 0x4000000000080002, 0x0) open(0x0, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/205, 0xcd) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x4d4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 168.192186][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.224301][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.235057][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.245741][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.255658][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.267153][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.279324][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 18:41:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) [ 168.295586][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.313840][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.325381][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.334550][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.347051][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.374684][ T8747] device veth0_macvtap entered promiscuous mode 18:41:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8003}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 168.390976][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.401873][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.416156][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.427985][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.438256][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.456309][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.469741][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.499882][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.509097][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.526513][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.539556][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.553556][ T8747] device veth1_macvtap entered promiscuous mode 18:41:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xe462, 0xfff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) [ 168.671120][ T8823] ================================================================== [ 168.679367][ T8823] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x178/0x320 [ 168.687080][ T8823] Read of size 8 at addr ffff88808d455908 by task syz-executor.1/8823 [ 168.695215][ T8823] [ 168.697525][ T8823] CPU: 0 PID: 8823 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 168.706081][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.716111][ T8823] Call Trace: [ 168.719377][ T8823] dump_stack+0x1fb/0x318 [ 168.723685][ T8823] print_address_description+0x74/0x5c0 [ 168.729205][ T8823] ? vprintk_default+0x28/0x30 [ 168.733945][ T8823] ? vprintk_func+0x158/0x170 [ 168.738614][ T8823] ? printk+0x62/0x8d [ 168.742590][ T8823] __kasan_report+0x149/0x1c0 [ 168.747254][ T8823] ? vgem_gem_dumb_create+0x178/0x320 [ 168.752606][ T8823] kasan_report+0x26/0x50 [ 168.756917][ T8823] __asan_report_load8_noabort+0x14/0x20 [ 168.762529][ T8823] vgem_gem_dumb_create+0x178/0x320 [ 168.767716][ T8823] drm_mode_create_dumb_ioctl+0x22e/0x2a0 [ 168.773414][ T8823] drm_ioctl_kernel+0x2cf/0x410 [ 168.778238][ T8823] ? drm_mode_create_dumb+0x2a0/0x2a0 [ 168.783626][ T8823] drm_ioctl+0x52f/0x890 [ 168.787865][ T8823] ? drm_mode_create_dumb+0x2a0/0x2a0 [ 168.793230][ T8823] ? do_vfs_ioctl+0x758/0x19d0 [ 168.797974][ T8823] ? tomoyo_file_ioctl+0x23/0x30 [ 168.802901][ T8823] ? drm_ioctl_kernel+0x410/0x410 [ 168.807910][ T8823] __se_sys_ioctl+0x113/0x190 [ 168.812564][ T8823] __x64_sys_ioctl+0x7b/0x90 [ 168.817136][ T8823] do_syscall_64+0xf7/0x1c0 [ 168.821616][ T8823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.827482][ T8823] RIP: 0033:0x45b3b9 [ 168.831367][ T8823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.850962][ T8823] RSP: 002b:00007f6bc8b89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.859346][ T8823] RAX: ffffffffffffffda RBX: 00007f6bc8b8a6d4 RCX: 000000000045b3b9 [ 168.867292][ T8823] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 168.875248][ T8823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 168.883200][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 168.891150][ T8823] R13: 0000000000000285 R14: 00000000004d15c8 R15: 000000000075bf2c [ 168.899109][ T8823] [ 168.901413][ T8823] Allocated by task 8823: [ 168.905720][ T8823] __kasan_kmalloc+0x118/0x1c0 [ 168.910454][ T8823] kasan_kmalloc+0x9/0x10 [ 168.914755][ T8823] kmem_cache_alloc_trace+0x221/0x2f0 [ 168.920103][ T8823] vgem_gem_dumb_create+0xd8/0x320 [ 168.925208][ T8823] drm_mode_create_dumb_ioctl+0x22e/0x2a0 [ 168.930919][ T8823] drm_ioctl_kernel+0x2cf/0x410 [ 168.935775][ T8823] drm_ioctl+0x52f/0x890 [ 168.939987][ T8823] __se_sys_ioctl+0x113/0x190 [ 168.944636][ T8823] __x64_sys_ioctl+0x7b/0x90 [ 168.949197][ T8823] do_syscall_64+0xf7/0x1c0 [ 168.953675][ T8823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.959533][ T8823] [ 168.961835][ T8823] Freed by task 8823: [ 168.965800][ T8823] __kasan_slab_free+0x12e/0x1e0 [ 168.970718][ T8823] kasan_slab_free+0xe/0x10 [ 168.975195][ T8823] kfree+0x10d/0x220 [ 168.979102][ T8823] vgem_gem_free_object+0xb5/0xc0 [ 168.984112][ T8823] drm_gem_object_put_unlocked+0x33a/0x4b0 [ 168.989899][ T8823] vgem_gem_dumb_create+0x265/0x320 [ 168.995084][ T8823] drm_mode_create_dumb_ioctl+0x22e/0x2a0 [ 169.000805][ T8823] drm_ioctl_kernel+0x2cf/0x410 [ 169.005632][ T8823] drm_ioctl+0x52f/0x890 [ 169.009845][ T8823] __se_sys_ioctl+0x113/0x190 [ 169.014494][ T8823] __x64_sys_ioctl+0x7b/0x90 [ 169.019057][ T8823] do_syscall_64+0xf7/0x1c0 [ 169.023533][ T8823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.029394][ T8823] [ 169.031696][ T8823] The buggy address belongs to the object at ffff88808d455800 [ 169.031696][ T8823] which belongs to the cache kmalloc-1k of size 1024 [ 169.045722][ T8823] The buggy address is located 264 bytes inside of [ 169.045722][ T8823] 1024-byte region [ffff88808d455800, ffff88808d455c00) [ 169.059068][ T8823] The buggy address belongs to the page: [ 169.064676][ T8823] page:ffffea0002351540 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0 [ 169.073753][ T8823] flags: 0xfffe0000000200(slab) [ 169.078577][ T8823] raw: 00fffe0000000200 ffffea00029d2408 ffffea000260a048 ffff8880aa400c40 [ 169.087136][ T8823] raw: 0000000000000000 ffff88808d455000 0000000100000002 0000000000000000 [ 169.095691][ T8823] page dumped because: kasan: bad access detected [ 169.102101][ T8823] [ 169.104404][ T8823] Memory state around the buggy address: [ 169.110009][ T8823] ffff88808d455800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.118071][ T8823] ffff88808d455880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.126107][ T8823] >ffff88808d455900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.134139][ T8823] ^ [ 169.138438][ T8823] ffff88808d455980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.146478][ T8823] ffff88808d455a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.154516][ T8823] ================================================================== [ 169.162555][ T8823] Disabling lock debugging due to kernel taint [ 169.172718][ T8823] Kernel panic - not syncing: panic_on_warn set ... [ 169.177428][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.179416][ T8823] CPU: 1 PID: 8823 Comm: syz-executor.1 Tainted: G B 5.6.0-rc1-syzkaller #0 [ 169.187467][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.196788][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.196792][ T8823] Call Trace: [ 169.196809][ T8823] dump_stack+0x1fb/0x318 [ 169.196824][ T8823] panic+0x264/0x7a9 [ 169.196838][ T8823] ? trace_hardirqs_on+0x34/0x80 [ 169.210790][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.214243][ T8823] __kasan_report+0x1b9/0x1c0 [ 169.214257][ T8823] ? vgem_gem_dumb_create+0x178/0x320 [ 169.214271][ T8823] kasan_report+0x26/0x50 [ 169.219011][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.221846][ T8823] __asan_report_load8_noabort+0x14/0x20 [ 169.225922][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.230624][ T8823] vgem_gem_dumb_create+0x178/0x320 [ 169.241155][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.245656][ T8823] drm_mode_create_dumb_ioctl+0x22e/0x2a0 [ 169.245673][ T8823] drm_ioctl_kernel+0x2cf/0x410 [ 169.251326][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.255332][ T8823] ? drm_mode_create_dumb+0x2a0/0x2a0 [ 169.255345][ T8823] drm_ioctl+0x52f/0x890 [ 169.255359][ T8823] ? drm_mode_create_dumb+0x2a0/0x2a0 [ 169.265287][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.270740][ T8823] ? do_vfs_ioctl+0x758/0x19d0 [ 169.281257][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.286286][ T8823] ? tomoyo_file_ioctl+0x23/0x30 [ 169.286301][ T8823] ? drm_ioctl_kernel+0x410/0x410 [ 169.296214][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.301764][ T8823] __se_sys_ioctl+0x113/0x190 [ 169.307794][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.316971][ T8823] __x64_sys_ioctl+0x7b/0x90 [ 169.316984][ T8823] do_syscall_64+0xf7/0x1c0 [ 169.316997][ T8823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.317011][ T8823] RIP: 0033:0x45b3b9 [ 169.326119][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.326587][ T8823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.331926][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.341708][ T8823] RSP: 002b:00007f6bc8b89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.341717][ T8823] RAX: ffffffffffffffda RBX: 00007f6bc8b8a6d4 RCX: 000000000045b3b9 [ 169.341737][ T8823] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 169.341741][ T8823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 169.341746][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 169.341751][ T8823] R13: 0000000000000285 R14: 00000000004d15c8 R15: 000000000075bf2c [ 169.347606][ T8823] Kernel Offset: disabled [ 169.500312][ T8823] Rebooting in 86400 seconds..