[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.44' (ECDSA) to the list of known hosts. 2020/12/17 00:31:35 fuzzer started 2020/12/17 00:31:36 dialing manager at 10.128.0.105:42301 2020/12/17 00:31:36 syscalls: 3465 2020/12/17 00:31:36 code coverage: enabled 2020/12/17 00:31:36 comparison tracing: enabled 2020/12/17 00:31:36 extra coverage: enabled 2020/12/17 00:31:36 setuid sandbox: enabled 2020/12/17 00:31:36 namespace sandbox: enabled 2020/12/17 00:31:36 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/17 00:31:36 fault injection: enabled 2020/12/17 00:31:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/17 00:31:36 net packet injection: enabled 2020/12/17 00:31:36 net device setup: enabled 2020/12/17 00:31:36 concurrency sanitizer: enabled 2020/12/17 00:31:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/17 00:31:36 USB emulation: enabled 2020/12/17 00:31:36 hci packet injection: enabled 2020/12/17 00:31:36 wifi device emulation: enabled 2020/12/17 00:31:39 suppressing KCSAN reports in functions: 'blk_mq_rq_ctx_init' 'pcpu_alloc' 'alloc_pid' 'do_signal_stop' 'n_tty_receive_buf_common' 'ext4_mb_regular_allocator' 'audit_log_start' 'wbt_wait' 'complete_signal' 'ext4_mark_iloc_dirty' 'ext4_writepages' 'generic_write_end' 'fsnotify' '__io_cqring_fill_event' 'generic_file_buffered_read' 'wg_packet_send_staged_packets' 'shmem_add_to_page_cache' 'blk_mq_sched_dispatch_requests' 'futex_wait_queue_me' 'ext4_mb_good_group' '__mod_timer' 'xas_find_marked' 'wbt_issue' 'kauditd_thread' '__xa_clear_mark' '__mark_inode_dirty' 'tick_nohz_next_event' 'expire_timers' '__ext4_update_other_inode_time' 'vfs_fsync_range' '__ext4_new_inode' 'do_sys_poll' 'dd_has_work' '__add_to_page_cache_locked' 'blk_mq_dispatch_rq_list' 'find_get_pages_range_tag' 'filemap_map_pages' '__writeback_single_inode' 'do_nanosleep' 'ext4_free_inode' 'ext4_free_inodes_count' '__filemap_fdatawrite_range' 'do_select' '__blkdev_put' 00:33:12 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') read$char_raw(r1, &(0x7f0000006840)=ANY=[], 0x2800) 00:33:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}}, 0x0) 00:33:12 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004a80)={0x2020}, 0x2020) 00:33:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)) chdir(&(0x7f0000000040)='./file0\x00') r2 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) r3 = dup(r2) ioctl$FITRIM(r3, 0x40047211, 0x0) 00:33:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 00:33:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000000), 0xb, 0x0) syzkaller login: [ 128.006118][ T8463] IPVS: ftp: loaded support on port[0] = 21 [ 128.065708][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 128.100716][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.107929][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.115897][ T8463] device bridge_slave_0 entered promiscuous mode [ 128.123603][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.130699][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.138295][ T8463] device bridge_slave_1 entered promiscuous mode [ 128.152393][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.162679][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.178164][ T8463] team0: Port device team_slave_0 added [ 128.184700][ T8463] team0: Port device team_slave_1 added [ 128.197706][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.204719][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.233631][ T8463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.245902][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.252870][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.278832][ T8463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.308989][ T8463] device hsr_slave_0 entered promiscuous mode [ 128.315371][ T8463] device hsr_slave_1 entered promiscuous mode [ 128.341865][ T8465] IPVS: ftp: loaded support on port[0] = 21 [ 128.399143][ T8463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.428234][ T8463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.443614][ T8463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.466743][ T8463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.475358][ T8465] chnl_net:caif_netlink_parms(): no params data found [ 128.477575][ T8467] IPVS: ftp: loaded support on port[0] = 21 [ 128.511478][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.520590][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.528440][ T8465] device bridge_slave_0 entered promiscuous mode [ 128.536878][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.543899][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.551627][ T8465] device bridge_slave_1 entered promiscuous mode [ 128.567192][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.578210][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.597348][ T8469] IPVS: ftp: loaded support on port[0] = 21 [ 128.599777][ T8465] team0: Port device team_slave_0 added [ 128.643433][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.650632][ T8463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.657898][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.664953][ T8463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.673476][ T8465] team0: Port device team_slave_1 added [ 128.724593][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.725257][ T8471] IPVS: ftp: loaded support on port[0] = 21 [ 128.732397][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.773928][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.796568][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.803510][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.829806][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.863449][ T8473] IPVS: ftp: loaded support on port[0] = 21 [ 128.906219][ T8465] device hsr_slave_0 entered promiscuous mode [ 128.912698][ T8465] device hsr_slave_1 entered promiscuous mode [ 128.919329][ T8465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.919334][ T8465] Cannot create hsr debugfs directory [ 128.954364][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 128.978739][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.990666][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 129.039734][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.060545][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.068120][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.076481][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.084674][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 129.113493][ T8471] chnl_net:caif_netlink_parms(): no params data found [ 129.151277][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.160883][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.169575][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.176608][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.184232][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.192810][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.201844][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.208886][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.216583][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.233776][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.241132][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.248933][ T8469] device bridge_slave_0 entered promiscuous mode [ 129.259177][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.266617][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.274077][ T8469] device bridge_slave_1 entered promiscuous mode [ 129.289800][ T8473] chnl_net:caif_netlink_parms(): no params data found [ 129.298253][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.307352][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.315610][ T8467] device bridge_slave_0 entered promiscuous mode [ 129.329991][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.345603][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.352625][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.360893][ T8467] device bridge_slave_1 entered promiscuous mode [ 129.375671][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.386905][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.395430][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.405272][ T8465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.420382][ T8465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.429743][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.440605][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.450518][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.459977][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.476549][ T8465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.502652][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.509909][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.517782][ T8473] device bridge_slave_0 entered promiscuous mode [ 129.527301][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.534317][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.542271][ T8473] device bridge_slave_1 entered promiscuous mode [ 129.551994][ T8465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.566252][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.576250][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.586465][ T8467] team0: Port device team_slave_0 added [ 129.595766][ T8469] team0: Port device team_slave_0 added [ 129.609131][ T8467] team0: Port device team_slave_1 added [ 129.624370][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.631547][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.657877][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.669909][ T8469] team0: Port device team_slave_1 added [ 129.683852][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.693382][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.701657][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.711207][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.720604][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.730364][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.737505][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.744997][ T8471] device bridge_slave_0 entered promiscuous mode [ 129.752544][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.759695][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.767132][ T8471] device bridge_slave_1 entered promiscuous mode [ 129.773808][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.780765][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.807026][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.824338][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.837089][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.863087][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.874725][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.887888][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.905887][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.922754][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.931417][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.958971][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.987943][ T8467] device hsr_slave_0 entered promiscuous mode [ 129.994410][ T8467] device hsr_slave_1 entered promiscuous mode [ 130.000789][ T8467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.008473][ T8467] Cannot create hsr debugfs directory [ 130.014654][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.031957][ T8469] device hsr_slave_0 entered promiscuous mode [ 130.038447][ T8469] device hsr_slave_1 entered promiscuous mode [ 130.045142][ T55] Bluetooth: hci0: command 0x0409 tx timeout [ 130.051170][ T8469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.058728][ T8469] Cannot create hsr debugfs directory [ 130.068045][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.086238][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.094163][ T8473] team0: Port device team_slave_0 added [ 130.102719][ T8473] team0: Port device team_slave_1 added [ 130.118062][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.172046][ T8471] team0: Port device team_slave_0 added [ 130.178078][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.185102][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.211163][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.223400][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.230685][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.257234][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.270632][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.282272][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.291518][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.302960][ T8471] team0: Port device team_slave_1 added [ 130.322401][ T8473] device hsr_slave_0 entered promiscuous mode [ 130.329104][ T8473] device hsr_slave_1 entered promiscuous mode [ 130.335906][ T8473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.343437][ T8473] Cannot create hsr debugfs directory [ 130.362550][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.369756][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 130.369899][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.402507][ T8471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.429882][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.438676][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.444845][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 130.449339][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.459990][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.470331][ T8463] device veth0_vlan entered promiscuous mode [ 130.477101][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.484110][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.510802][ T8471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.525715][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.533510][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.545268][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.554758][ T8463] device veth1_vlan entered promiscuous mode [ 130.562397][ T8469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.571263][ T8469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.586776][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.594582][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.603359][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.604852][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 130.611911][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.624322][ T9426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.637629][ T8469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.647868][ T8469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.677103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.685516][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.693457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.702755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.711340][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.718397][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.726262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.734573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.742874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.760286][ T8471] device hsr_slave_0 entered promiscuous mode [ 130.766389][ T55] Bluetooth: hci4: command 0x0409 tx timeout [ 130.772705][ T8471] device hsr_slave_1 entered promiscuous mode [ 130.779382][ T8471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.787380][ T8471] Cannot create hsr debugfs directory [ 130.794015][ T8463] device veth0_macvtap entered promiscuous mode [ 130.804009][ T8463] device veth1_macvtap entered promiscuous mode [ 130.811728][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.819685][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.827491][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.836350][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.844663][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.853251][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.862923][ T8874] Bluetooth: hci5: command 0x0409 tx timeout [ 130.878851][ T8467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.888081][ T8467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.903828][ T8465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.919671][ T8465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.931203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.939516][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.948045][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.956196][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.964475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.976498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.986451][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.999647][ T8467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.008376][ T8467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.026315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.033793][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.042756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.055365][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.073210][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.081905][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.093886][ T8463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.104493][ T8463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.113621][ T8463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.122757][ T8463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.141832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.149268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.164271][ T8473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.173249][ T8473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.191692][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.212774][ T8473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.235041][ T8471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.256547][ T8473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.268663][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.283729][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.293498][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.301038][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.308611][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.317086][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.325481][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.332490][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.340204][ T8471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.370572][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.379245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.386866][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.397132][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.404652][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.413252][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.421805][ T8471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.437827][ T8471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.455102][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.462910][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.474911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.482556][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.491457][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.499833][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.506886][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.518389][ T8465] device veth0_vlan entered promiscuous mode [ 131.546614][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.554708][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.563763][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.572826][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.581933][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.593721][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.607839][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.616620][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 00:33:17 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') read$char_raw(r1, &(0x7f0000006840)=ANY=[], 0x2800) [ 131.641597][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.661469][ T8469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.674671][ T8469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.695411][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.703022][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.714520][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.723885][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 00:33:17 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') read$char_raw(r1, &(0x7f0000006840)=ANY=[], 0x2800) [ 131.744648][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.753489][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.762142][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.783858][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 00:33:17 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') read$char_raw(r1, &(0x7f0000006840)=ANY=[], 0x2800) [ 131.798034][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.811773][ T8465] device veth1_vlan entered promiscuous mode [ 131.818709][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.828208][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.835956][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.843539][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.851790][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.861964][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.883631][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 00:33:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000021c0)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000002240), &(0x7f0000000000)=0x11d4aa717184891f) [ 131.914197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.927741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.939430][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.950239][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.957310][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.966730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.975108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.983271][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.990321][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.003072][ T8471] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.015490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.023145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.031441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.039251][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.052823][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.067099][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.084816][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.092235][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.100626][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.109559][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.121830][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.124820][ T8874] Bluetooth: hci0: command 0x041b tx timeout [ 132.130566][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.142814][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.150583][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.159120][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.167558][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.174623][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.182784][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.191599][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.200045][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.207121][ T3652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.214984][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.225259][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.232977][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.252700][ T8465] device veth0_macvtap entered promiscuous mode [ 132.259336][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.268128][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.276718][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.285487][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.293654][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.302596][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.311165][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.319644][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.327016][ T3652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.334580][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.343168][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.351658][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.360216][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.368360][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.387026][ T8465] device veth1_macvtap entered promiscuous mode [ 132.396323][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.404013][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.414372][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.423050][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.432847][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.441369][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.449900][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.458349][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.467059][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.475708][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.484100][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.492622][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.501649][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.509709][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.517708][ T55] Bluetooth: hci1: command 0x041b tx timeout [ 132.523166][ T8473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.525051][ T17] Bluetooth: hci2: command 0x041b tx timeout [ 132.537197][ T8473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.564719][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.575166][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.587390][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.594790][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.603546][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.612186][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.620679][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.629071][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.637376][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.645735][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.654202][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.667318][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.680647][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.685387][ T17] Bluetooth: hci3: command 0x041b tx timeout [ 132.689163][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.702339][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.719207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.727584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.735962][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.744124][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.752668][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 00:33:18 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}], 0x30}], 0x1, 0x0) [ 132.763431][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.774453][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.783499][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.796407][ T8469] device veth0_vlan entered promiscuous mode [ 132.803737][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.812676][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.822217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.830780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.839525][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.847325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.866143][ T9426] Bluetooth: hci4: command 0x041b tx timeout 00:33:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000027000511d25a802a8c63940d0424fc60040012400a001100022f000037153e370a00018004000000d1bd", 0x2e}], 0x1}, 0x0) [ 132.875286][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.886758][ T8465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.896471][ T8465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.912011][ T8465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.925431][ T8465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.938852][ T9426] Bluetooth: hci5: command 0x041b tx timeout [ 132.956106][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.963787][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.971921][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.981775][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.994873][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.002239][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.015833][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0 00:33:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000027000511d25a802a8c63940d0424fc60040012400a001100022f000037153e370a00018004000000d1bd", 0x2e}], 0x1}, 0x0) [ 133.037626][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.056356][ T8469] device veth1_vlan entered promiscuous mode [ 133.091518][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.105449][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.113373][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.124125][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.149017][ T8467] device veth0_vlan entered promiscuous mode [ 133.177176][ T9826] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 133.189371][ T9826] CPU: 1 PID: 9826 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 133.197689][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.207732][ T9826] Call Trace: [ 133.211029][ T9826] dump_stack+0x116/0x15d [ 133.215464][ T9826] sysfs_warn_dup+0x71/0x80 [ 133.219942][ T9826] sysfs_do_create_link_sd+0xa4/0xf0 [ 133.225216][ T9826] sysfs_create_link+0x4d/0x60 [ 133.229989][ T9826] device_add+0x602/0xe50 [ 133.234303][ T9826] wiphy_register+0x10fa/0x1850 [ 133.239315][ T9826] ieee80211_register_hw+0x187a/0x1e40 [ 133.244788][ T9826] ? __rcu_read_unlock+0x51/0x250 [ 133.249789][ T9826] mac80211_hwsim_new_radio+0x1538/0x1f20 [ 133.255489][ T9826] hwsim_new_radio_nl+0x5fc/0x770 [ 133.260489][ T9826] genl_rcv_msg+0x75f/0x800 [ 133.264992][ T9826] ? hwsim_tx_info_frame_received_nl+0x540/0x540 [ 133.271300][ T9826] netlink_rcv_skb+0x13e/0x240 [ 133.276038][ T9826] ? genl_rcv+0x40/0x40 [ 133.280266][ T9826] genl_rcv+0x24/0x40 [ 133.284232][ T9826] netlink_unicast+0x5df/0x6b0 [ 133.288971][ T9826] netlink_sendmsg+0x6f8/0x7c0 [ 133.293751][ T9826] ? netlink_getsockopt+0x720/0x720 [ 133.298920][ T9826] ____sys_sendmsg+0x352/0x4c0 [ 133.303665][ T9826] ? import_iovec+0xb8/0xd0 [ 133.308140][ T9826] __sys_sendmsg+0x1ed/0x270 [ 133.312705][ T9826] ? percpu_counter_add_batch+0xe1/0x100 [ 133.318311][ T9826] ? alloc_empty_file+0x107/0x1c0 [ 133.323382][ T9826] ? errseq_sample+0x2b/0x40 [ 133.327951][ T9826] ? alloc_file+0x253/0x280 [ 133.332435][ T9826] ? ktime_get_ts64+0x2c9/0x300 [ 133.337259][ T9826] ? should_fail+0x2a/0x240 [ 133.341775][ T9826] ? _copy_to_user+0x77/0x90 [ 133.346351][ T9826] ? put_timespec64+0x61/0x90 [ 133.351143][ T9826] __x64_sys_sendmsg+0x42/0x50 [ 133.355925][ T9826] do_syscall_64+0x39/0x80 [ 133.360314][ T9826] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 133.366197][ T9826] RIP: 0033:0x45e149 [ 133.370070][ T9826] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 133.389643][ T9826] RSP: 002b:00007f1685e5dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.398191][ T9826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 133.406156][ T9826] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 133.414115][ T9826] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 133.422075][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 133.430019][ T9826] R13: 00007ffd2465557f R14: 00007f1685e5e9c0 R15: 000000000119bf8c [ 133.454346][ T8469] device veth0_macvtap entered promiscuous mode [ 133.461922][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.470026][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.478835][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.487388][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.496001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.503470][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.511090][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.524582][ T8467] device veth1_vlan entered promiscuous mode [ 133.542109][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.554382][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.557313][ T8469] device veth1_macvtap entered promiscuous mode [ 133.598058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.609345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.617376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.627464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.651284][ T8467] device veth0_macvtap entered promiscuous mode [ 133.678109][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.678444][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.687067][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.702436][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.705825][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.718594][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.727552][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.740202][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.749259][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.757718][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.768318][ T8467] device veth1_macvtap entered promiscuous mode [ 133.776917][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 133.788238][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.798672][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 133.809462][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.820412][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.839857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.848040][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.857179][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.870404][ T8471] device veth0_vlan entered promiscuous mode [ 133.885070][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.893471][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 00:33:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}}, 0x0) [ 133.915883][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.923935][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.934854][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.942470][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.952502][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.963994][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.980618][ T8473] device veth0_vlan entered promiscuous mode [ 133.992727][ T8471] device veth1_vlan entered promiscuous mode [ 134.009435][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.020796][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.032736][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.043189][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.053207][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.063754][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.074320][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.081746][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.092287][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.102284][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.112728][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.123916][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.141609][ T8473] device veth1_vlan entered promiscuous mode [ 134.148228][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.157134][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.165521][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.173455][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.182695][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.191467][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.200301][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.205012][ T8874] Bluetooth: hci0: command 0x040f tx timeout [ 134.211545][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.225421][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.236940][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.247538][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.257478][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.267899][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.278535][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.289098][ T8469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.298745][ T8469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.309281][ T8469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.318012][ T8469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.340237][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.349086][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.359355][ T8467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.369292][ T8467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.378239][ T8467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.387046][ T8467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.417757][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.434518][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.448743][ T8471] device veth0_macvtap entered promiscuous mode [ 134.459393][ T8471] device veth1_macvtap entered promiscuous mode [ 134.480647][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.488556][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.496608][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.505233][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.516131][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.526926][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.527026][ T8874] Bluetooth: hci1: command 0x040f tx timeout [ 134.541096][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.553221][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.563067][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.573557][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.583653][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.594283][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.604844][ T8874] Bluetooth: hci2: command 0x040f tx timeout [ 134.607473][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.624577][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.633075][ T8473] device veth0_macvtap entered promiscuous mode [ 134.639591][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.655791][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.663602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.671362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.679911][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.698404][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.708865][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.719486][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.729993][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.740093][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.750575][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.760533][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 134.771007][ T17] Bluetooth: hci3: command 0x040f tx timeout [ 134.771499][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.788048][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.799560][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.800151][ T8473] device veth1_macvtap entered promiscuous mode [ 134.821477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.824817][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.840534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.850001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.858510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.868337][ T8471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.877441][ T8471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.886209][ T8471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.895098][ T8471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.924549][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.935111][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 134.952614][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.965050][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 134.983176][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.993881][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 135.005289][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.006460][ T9426] Bluetooth: hci5: command 0x040f tx timeout [ 135.019810][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 135.032560][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.043134][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 135.054487][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.064622][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 135.075256][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.091668][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.105521][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.113214][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.136780][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.166571][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.174373][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.174790][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.193936][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.203928][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.214595][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.224452][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.234947][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.244732][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.255475][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.265754][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.276294][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.287365][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.302280][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.325765][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.334250][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.345402][ T8473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.354096][ T8473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.364557][ T8473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.373493][ T8473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.442421][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.453658][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.477057][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00:33:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x18}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x60}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c0}, 0x48) 00:33:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000027000511d25a802a8c63940d0424fc60040012400a001100022f000037153e370a00018004000000d1bd", 0x2e}], 0x1}, 0x0) [ 135.496030][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.505021][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.513228][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.522895][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.528852][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.600578][ T9957] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 135.611785][ T9957] CPU: 1 PID: 9957 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 135.620112][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.630194][ T9957] Call Trace: [ 135.633480][ T9957] dump_stack+0x116/0x15d [ 135.637799][ T9957] sysfs_warn_dup+0x71/0x80 [ 135.642329][ T9957] sysfs_do_create_link_sd+0xa4/0xf0 [ 135.647611][ T9957] sysfs_create_link+0x4d/0x60 [ 135.652367][ T9957] device_add+0x602/0xe50 [ 135.656712][ T9957] wiphy_register+0x10fa/0x1850 [ 135.661640][ T9957] ieee80211_register_hw+0x187a/0x1e40 [ 135.667117][ T9957] ? __rcu_read_unlock+0x51/0x250 [ 135.672137][ T9957] mac80211_hwsim_new_radio+0x1538/0x1f20 [ 135.677913][ T9957] hwsim_new_radio_nl+0x5fc/0x770 [ 135.682933][ T9957] genl_rcv_msg+0x75f/0x800 [ 135.687434][ T9957] ? hwsim_tx_info_frame_received_nl+0x540/0x540 [ 135.693828][ T9957] netlink_rcv_skb+0x13e/0x240 [ 135.698581][ T9957] ? genl_rcv+0x40/0x40 [ 135.702726][ T9957] genl_rcv+0x24/0x40 [ 135.706700][ T9957] netlink_unicast+0x5df/0x6b0 [ 135.711453][ T9957] netlink_sendmsg+0x6f8/0x7c0 [ 135.716245][ T9957] ? netlink_getsockopt+0x720/0x720 [ 135.721414][ T9957] ____sys_sendmsg+0x352/0x4c0 [ 135.726206][ T9957] ? import_iovec+0xb8/0xd0 [ 135.730720][ T9957] __sys_sendmsg+0x1ed/0x270 [ 135.735303][ T9957] ? percpu_counter_add_batch+0xe1/0x100 [ 135.740941][ T9957] ? alloc_empty_file+0x107/0x1c0 [ 135.745951][ T9957] ? errseq_sample+0x2b/0x40 [ 135.750511][ T9957] ? alloc_file+0x253/0x280 [ 135.755033][ T9957] ? ktime_get_ts64+0x2c9/0x300 [ 135.759903][ T9957] ? should_fail+0x2a/0x240 [ 135.764419][ T9957] ? _copy_to_user+0x77/0x90 [ 135.769063][ T9957] ? put_timespec64+0x61/0x90 [ 135.773751][ T9957] __x64_sys_sendmsg+0x42/0x50 [ 135.778503][ T9957] do_syscall_64+0x39/0x80 [ 135.782892][ T9957] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 135.788755][ T9957] RIP: 0033:0x45e149 [ 135.792637][ T9957] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 135.812248][ T9957] RSP: 002b:00007f1685e5dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.820638][ T9957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 135.828616][ T9957] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 135.836560][ T9957] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 135.844556][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 135.852501][ T9957] R13: 00007ffd2465557f R14: 00007f1685e5e9c0 R15: 000000000119bf8c [ 135.865873][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.871679][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.893298][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.903423][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.950135][ T9971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 136.284855][ T3652] Bluetooth: hci0: command 0x0419 tx timeout [ 136.605710][ T9269] Bluetooth: hci1: command 0x0419 tx timeout [ 136.685069][ T9269] Bluetooth: hci2: command 0x0419 tx timeout [ 136.845281][ T9269] Bluetooth: hci3: command 0x0419 tx timeout [ 137.005217][ T3652] Bluetooth: hci4: command 0x0419 tx timeout [ 137.085491][ T3652] Bluetooth: hci5: command 0x0419 tx timeout 00:33:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 00:33:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}}, 0x0) 00:33:24 executing program 3: mq_unlink(&(0x7f0000000200)='.\x00') 00:33:24 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) recvfrom$l2tp6(r0, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x7, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "a1615163ff4af190"}}, 0x20000148}}, 0x0) 00:33:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000027000511d25a802a8c63940d0424fc60040012400a001100022f000037153e370a00018004000000d1bd", 0x2e}], 0x1}, 0x0) 00:33:24 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000002000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000bd8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000f48000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read$FUSE(r0, 0x0, 0x116) 00:33:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) [ 138.974932][ T9988] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 138.982583][ T9988] CPU: 0 PID: 9988 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 138.990889][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.000928][ T9988] Call Trace: [ 139.004267][ T9988] dump_stack+0x116/0x15d [ 139.008592][ T9988] sysfs_warn_dup+0x71/0x80 [ 139.013094][ T9988] sysfs_do_create_link_sd+0xa4/0xf0 [ 139.018383][ T9988] sysfs_create_link+0x4d/0x60 [ 139.023206][ T9988] device_add+0x602/0xe50 [ 139.027535][ T9988] wiphy_register+0x10fa/0x1850 [ 139.032429][ T9988] ieee80211_register_hw+0x187a/0x1e40 [ 139.037939][ T9988] ? __rcu_read_unlock+0x51/0x250 [ 139.042957][ T9988] mac80211_hwsim_new_radio+0x1538/0x1f20 [ 139.048669][ T9988] hwsim_new_radio_nl+0x5fc/0x770 [ 139.053714][ T9988] genl_rcv_msg+0x75f/0x800 [ 139.058213][ T9988] ? hwsim_tx_info_frame_received_nl+0x540/0x540 [ 139.064538][ T9988] netlink_rcv_skb+0x13e/0x240 [ 139.069411][ T9988] ? genl_rcv+0x40/0x40 [ 139.073602][ T9988] genl_rcv+0x24/0x40 [ 139.077577][ T9988] netlink_unicast+0x5df/0x6b0 [ 139.082335][ T9988] netlink_sendmsg+0x6f8/0x7c0 [ 139.087105][ T9988] ? netlink_getsockopt+0x720/0x720 [ 139.092356][ T9988] ____sys_sendmsg+0x352/0x4c0 [ 139.097112][ T9988] ? import_iovec+0xb8/0xd0 [ 139.101605][ T9988] __sys_sendmsg+0x1ed/0x270 [ 139.106248][ T9988] ? percpu_counter_add_batch+0xe1/0x100 [ 139.111869][ T9988] ? alloc_empty_file+0x107/0x1c0 [ 139.116875][ T9988] ? errseq_sample+0x2b/0x40 [ 139.121448][ T9988] ? alloc_file+0x253/0x280 [ 139.125943][ T9988] ? ktime_get_ts64+0x2c9/0x300 [ 139.130777][ T9988] ? should_fail+0x2a/0x240 [ 139.135284][ T9988] ? _copy_to_user+0x77/0x90 [ 139.139855][ T9988] ? put_timespec64+0x61/0x90 [ 139.144541][ T9988] __x64_sys_sendmsg+0x42/0x50 [ 139.149289][ T9988] do_syscall_64+0x39/0x80 [ 139.153689][ T9988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 139.159563][ T9988] RIP: 0033:0x45e149 [ 139.163457][ T9988] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 139.183103][ T9988] RSP: 002b:00007f1685e5dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.191573][ T9988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 139.199527][ T9988] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 139.207492][ T9988] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 139.215510][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c 00:33:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}}, 0x0) [ 139.223535][ T9988] R13: 00007ffd2465557f R14: 00007f1685e5e9c0 R15: 000000000119bf8c 00:33:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 00:33:24 executing program 0: ioprio_get$pid(0x2, 0xffffffffffffffff) 00:33:24 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) recvfrom$l2tp6(r0, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x7, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "a1615163ff4af190"}}, 0x20000148}}, 0x0) 00:33:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9015d30130000000002ca"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1f000, 0x40240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:33:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 00:33:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010045) 00:33:24 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_config_ext={0x7ffffffd, 0xffffffffffff8001}, 0x40018, 0x0, 0x8, 0x0, 0x5, 0xffffffff, 0x4}, 0xffffffffffffffff, 0x87, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, r1, 0x202002) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) personality(0x100005) fchdir(r0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x825, 0x8}) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x41, 0x10, 0x0, 0x10, 0x0, 0x1, 0x1680, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xff8, 0x6}, 0x500, 0x0, 0xff, 0x0, 0x9, 0x8b, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x8) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4400, 0xc8e202) write$FUSE_OPEN(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffff67) syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netfilter\x00') preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/149, 0x95}, {&(0x7f0000000a00)=""/257, 0x101}, {&(0x7f0000000b40)=""/84, 0xfffffffffffffce4}, {&(0x7f00000005c0)=""/153, 0x8f}, {&(0x7f0000000500)=""/108}, {&(0x7f0000000800)=""/190}], 0x10000000000001ac, 0x7fffffff, 0x200) read$alg(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xc}, 0x8c7e33f9da2d7ac8, 0x1, 0xffffffff, 0x6, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6, 0x2, &(0x7f0000000580)=[{&(0x7f0000000080)="0300400d0314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {&(0x7f00000003c0)="e1ca06000000a506934926706a1603ddf3ad13d6862e54ae48c6ec970c17137a6a8169", 0x23, 0x5}]) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) clone(0x82000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:33:24 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) recvfrom$l2tp6(r0, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x7, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "a1615163ff4af190"}}, 0x20000148}}, 0x0) [ 139.401809][T10024] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:33:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 00:33:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x3, 0x25}]}, 0x3c}}, 0x0) 00:33:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010045) [ 139.495271][T10030] ldm_validate_privheads(): Disk read failed. [ 139.503105][T10030] loop0: p2 < > [ 139.509076][T10030] loop0: partition table partially beyond EOD, truncated [ 139.523474][T10030] loop0: p2 size 2 extends beyond EOD, truncated 00:33:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010045) 00:33:25 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) recvfrom$l2tp6(r0, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x7, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "a1615163ff4af190"}}, 0x20000148}}, 0x0) 00:33:25 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_config_ext={0x7ffffffd, 0xffffffffffff8001}, 0x40018, 0x0, 0x8, 0x0, 0x5, 0xffffffff, 0x4}, 0xffffffffffffffff, 0x87, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, r1, 0x202002) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) personality(0x100005) fchdir(r0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x825, 0x8}) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x41, 0x10, 0x0, 0x10, 0x0, 0x1, 0x1680, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xff8, 0x6}, 0x500, 0x0, 0xff, 0x0, 0x9, 0x8b, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x8) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4400, 0xc8e202) write$FUSE_OPEN(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffff67) syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netfilter\x00') preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/149, 0x95}, {&(0x7f0000000a00)=""/257, 0x101}, {&(0x7f0000000b40)=""/84, 0xfffffffffffffce4}, {&(0x7f00000005c0)=""/153, 0x8f}, {&(0x7f0000000500)=""/108}, {&(0x7f0000000800)=""/190}], 0x10000000000001ac, 0x7fffffff, 0x200) read$alg(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xc}, 0x8c7e33f9da2d7ac8, 0x1, 0xffffffff, 0x6, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6, 0x2, &(0x7f0000000580)=[{&(0x7f0000000080)="0300400d0314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {&(0x7f00000003c0)="e1ca06000000a506934926706a1603ddf3ad13d6862e54ae48c6ec970c17137a6a8169", 0x23, 0x5}]) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) clone(0x82000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:33:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 00:33:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 00:33:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010045) 00:33:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010045) 00:33:25 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000001c0)={0x2a, 0x1}, 0xc) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc) 00:33:25 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_config_ext={0x7ffffffd, 0xffffffffffff8001}, 0x40018, 0x0, 0x8, 0x0, 0x5, 0xffffffff, 0x4}, 0xffffffffffffffff, 0x87, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, r1, 0x202002) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) personality(0x100005) fchdir(r0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x825, 0x8}) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x41, 0x10, 0x0, 0x10, 0x0, 0x1, 0x1680, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xff8, 0x6}, 0x500, 0x0, 0xff, 0x0, 0x9, 0x8b, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x8) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4400, 0xc8e202) write$FUSE_OPEN(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffff67) syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netfilter\x00') preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/149, 0x95}, {&(0x7f0000000a00)=""/257, 0x101}, {&(0x7f0000000b40)=""/84, 0xfffffffffffffce4}, {&(0x7f00000005c0)=""/153, 0x8f}, {&(0x7f0000000500)=""/108}, {&(0x7f0000000800)=""/190}], 0x10000000000001ac, 0x7fffffff, 0x200) read$alg(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xc}, 0x8c7e33f9da2d7ac8, 0x1, 0xffffffff, 0x6, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6, 0x2, &(0x7f0000000580)=[{&(0x7f0000000080)="0300400d0314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {&(0x7f00000003c0)="e1ca06000000a506934926706a1603ddf3ad13d6862e54ae48c6ec970c17137a6a8169", 0x23, 0x5}]) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) clone(0x82000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:33:25 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/212, 0xd4}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x11c, 0x0, 0x0) 00:33:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff8}]}) setfsgid(0x0) 00:33:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010045) 00:33:25 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ext3\x00', 0x0, 0x0) 00:33:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = memfd_create(&(0x7f00000002c0)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd99Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b$\x14\xa47\r1J\xb1\x19g_\xa8V\'\xd2n/\xf4\x8a\x00x\x15\xb6w8\x19~\xff*h\x16nb\xfdna\xed\xaf\x95\xe7+s\xb2\xe7\xebP9\x19\x02\x11h`6\xfaA5\xf8Eyc\xb4m\xe2\x94CK\xf6\x14\xd7Q<\x87 \x89\x98\xcf/\xa5;d\xe8 \xb3-]\xb0k\x87T\xc7q\x86`%?R\xb4\r;F\xef\xd9\xeej$\x99\xe4hR N\xbbi\x90\rn\x83\x13\xd6\xea\x06+\xc8x\b\x14\xe2\x0e\xab\'V\xdbm\x8e\xd7\x8eKu\xbbv\x03$\xc7\x86;\xac\'\xc0\xa8\xab\xe3:\xce\xb2x7G\xa6?\xce1-M\xd2\xe2J\xa7\xe6\xf9\x95;\xab\xcfn\x14\xef\x03\xee\xbb\x15\xe3@\xea\xaeZ\xb2\n\xef\x0f\xce?\xcal\x16\x9d\xa4\xe8x\x15\x8eZ\xaceTA\xde\x93\xd9<\xc9\xdfY9nZv5C9\xf8\x00'/366, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2cdab05b591201ac59b700000000000002"], 0x72) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000009, 0x11, r1, 0x0) write$evdev(r0, &(0x7f0000000040), 0xfd18) 00:33:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x400000000000002) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, 0x0}, 0x0) [ 139.953831][T10106] ================================================================== [ 139.961931][T10106] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 139.968950][T10106] [ 139.971273][T10106] read-write to 0xffff88813bd1de94 of 4 bytes by interrupt on cpu 1: [ 139.979331][T10106] hrtimer_interrupt+0x7b/0xa10 [ 139.984174][T10106] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 139.990051][T10106] asm_call_irq_on_stack+0xf/0x20 [ 139.995069][T10106] sysvec_apic_timer_interrupt+0x52/0x90 [ 140.000688][T10106] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.006670][T10106] __tsan_unaligned_write8+0x116/0x190 [ 140.012130][T10106] zap_pte_range+0x338/0x13c0 [ 140.016807][T10106] unmap_page_range+0x560/0x660 [ 140.021682][T10106] unmap_single_vma+0x157/0x210 [ 140.026538][T10106] unmap_vmas+0xbf/0x150 [ 140.030793][T10106] exit_mmap+0x1c7/0x400 [ 140.035027][T10106] __mmput+0xa2/0x220 [ 140.038996][T10106] mmput+0x38/0x40 [ 140.042705][T10106] exit_mm+0x32f/0x420 [ 140.046762][T10106] do_exit+0x3c8/0x1630 [ 140.050908][T10106] do_group_exit+0xc8/0x170 [ 140.055406][T10106] get_signal+0xf9b/0x1510 [ 140.059817][T10106] arch_do_signal_or_restart+0x2a/0x270 [ 140.065358][T10106] exit_to_user_mode_prepare+0x109/0x1a0 [ 140.070982][T10106] syscall_exit_to_user_mode+0x20/0x40 [ 140.076424][T10106] do_syscall_64+0x45/0x80 [ 140.080825][T10106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 140.086692][T10106] [ 140.089016][T10106] read to 0xffff88813bd1de94 of 4 bytes by task 10106 on cpu 0: [ 140.096628][T10106] print_cpu+0x37f/0x690 [ 140.100856][T10106] timer_list_show+0x114/0x180 [ 140.105610][T10106] seq_read_iter+0x5f6/0x8e0 [ 140.110196][T10106] proc_reg_read_iter+0xfc/0x170 [ 140.115123][T10106] generic_file_splice_read+0x22a/0x310 [ 140.120659][T10106] splice_direct_to_actor+0x2aa/0x650 [ 140.126012][T10106] do_splice_direct+0xf5/0x170 [ 140.130766][T10106] do_sendfile+0x5db/0xca0 [ 140.135192][T10106] __x64_sys_sendfile64+0xf2/0x130 [ 140.138247][T10110] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 140.140298][T10106] do_syscall_64+0x39/0x80 [ 140.140318][T10106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 140.157147][T10106] [ 140.159457][T10106] Reported by Kernel Concurrency Sanitizer on: [ 140.165593][T10106] CPU: 0 PID: 10106 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 140.173985][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.184021][T10106] ================================================================== [ 140.192062][T10106] Kernel panic - not syncing: panic_on_warn set ... [ 140.198631][T10106] CPU: 0 PID: 10106 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 140.207020][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.217058][T10106] Call Trace: [ 140.220330][T10106] dump_stack+0x116/0x15d [ 140.224647][T10106] panic+0x1e7/0x5fa [ 140.228524][T10106] ? vprintk_emit+0x2f2/0x370 [ 140.233185][T10106] kcsan_report+0x67b/0x680 [ 140.237689][T10106] ? kcsan_setup_watchpoint+0x47b/0x4e0 [ 140.243215][T10106] ? print_cpu+0x37f/0x690 [ 140.247630][T10106] ? timer_list_show+0x114/0x180 [ 140.252552][T10106] ? seq_read_iter+0x5f6/0x8e0 [ 140.257301][T10106] ? proc_reg_read_iter+0xfc/0x170 [ 140.262399][T10106] ? generic_file_splice_read+0x22a/0x310 [ 140.268100][T10106] ? splice_direct_to_actor+0x2aa/0x650 [ 140.273627][T10106] ? do_splice_direct+0xf5/0x170 [ 140.278550][T10106] ? do_sendfile+0x5db/0xca0 [ 140.283123][T10106] ? __x64_sys_sendfile64+0xf2/0x130 [ 140.288393][T10106] ? do_syscall_64+0x39/0x80 [ 140.292970][T10106] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 140.299024][T10106] ? sched_clock_cpu+0x11/0x1a0 [ 140.303856][T10106] ? irqentry_exit+0x2a/0x40 [ 140.308439][T10106] ? sysvec_apic_timer_interrupt+0x80/0x90 [ 140.314233][T10106] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.320372][T10106] ? SEQ_printf+0x76/0xb0 [ 140.324687][T10106] kcsan_setup_watchpoint+0x47b/0x4e0 [ 140.330040][T10106] print_cpu+0x37f/0x690 [ 140.334266][T10106] timer_list_show+0x114/0x180 [ 140.339015][T10106] seq_read_iter+0x5f6/0x8e0 [ 140.343592][T10106] proc_reg_read_iter+0xfc/0x170 [ 140.348510][T10106] generic_file_splice_read+0x22a/0x310 [ 140.354038][T10106] ? splice_shrink_spd+0x60/0x60 [ 140.358957][T10106] splice_direct_to_actor+0x2aa/0x650 [ 140.364327][T10106] ? do_splice_direct+0x170/0x170 [ 140.369333][T10106] do_splice_direct+0xf5/0x170 [ 140.374101][T10106] do_sendfile+0x5db/0xca0 [ 140.378505][T10106] __x64_sys_sendfile64+0xf2/0x130 [ 140.383612][T10106] do_syscall_64+0x39/0x80 [ 140.388016][T10106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 140.393887][T10106] RIP: 0033:0x45e149 [ 140.397765][T10106] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 140.417354][T10106] RSP: 002b:00007fdd8208dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 140.425748][T10106] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 140.433701][T10106] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 140.441655][T10106] RBP: 000000000119bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 140.449609][T10106] R10: 4000000000010045 R11: 0000000000000246 R12: 000000000119bf8c [ 140.457561][T10106] R13: 00007ffc13aafd7f R14: 00007fdd8208e9c0 R15: 000000000119bf8c [ 140.465925][T10106] Kernel Offset: disabled [ 140.470235][T10106] Rebooting in 86400 seconds..