[ OK ] Started Getty on tty4. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2020/07/10 00:38:34 fuzzer started 2020/07/10 00:38:34 dialing manager at 10.128.0.26:35237 2020/07/10 00:38:35 syscalls: 3150 2020/07/10 00:38:35 code coverage: enabled 2020/07/10 00:38:35 comparison tracing: enabled 2020/07/10 00:38:35 extra coverage: enabled 2020/07/10 00:38:35 setuid sandbox: enabled 2020/07/10 00:38:35 namespace sandbox: enabled 2020/07/10 00:38:35 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/10 00:38:35 fault injection: enabled 2020/07/10 00:38:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/10 00:38:35 net packet injection: enabled 2020/07/10 00:38:35 net device setup: enabled 2020/07/10 00:38:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/10 00:38:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/10 00:38:35 USB emulation: enabled 00:41:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8004550f, &(0x7f0000000100)) syzkaller login: [ 248.302233][ T6865] IPVS: ftp: loaded support on port[0] = 21 00:41:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$apparmor_current(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="636861be1e000000000000cb765fcff32cc0d197e7c9"], 0x1d) [ 248.450642][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 248.574630][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.598380][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.618794][ T6865] device bridge_slave_0 entered promiscuous mode [ 248.639616][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.657930][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.666135][ T6865] device bridge_slave_1 entered promiscuous mode 00:41:40 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@hat={'changehat ', 0x2, 0x5e, ['/\'*\x00']}, 0x21) [ 248.727795][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.751527][ T6995] IPVS: ftp: loaded support on port[0] = 21 [ 248.759920][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.835492][ T6865] team0: Port device team_slave_0 added [ 248.857262][ T6865] team0: Port device team_slave_1 added [ 248.912674][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.922283][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.950125][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.989587][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.996564][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.026796][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:41:41 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="33134417391e", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) [ 249.200167][ T6865] device hsr_slave_0 entered promiscuous mode [ 249.256984][ T6865] device hsr_slave_1 entered promiscuous mode [ 249.304229][ T7045] IPVS: ftp: loaded support on port[0] = 21 [ 249.312444][ T6995] chnl_net:caif_netlink_parms(): no params data found [ 249.381817][ T7134] IPVS: ftp: loaded support on port[0] = 21 00:41:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6368616e67656861742030cb"], 0x1d) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 249.594502][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.617991][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.629988][ T6995] device bridge_slave_0 entered promiscuous mode [ 249.697122][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.704209][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.738493][ T6995] device bridge_slave_1 entered promiscuous mode [ 249.802144][ T6995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.872269][ T6995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:41:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@hat={'changehat '}, 0x1d) [ 250.052930][ T7045] chnl_net:caif_netlink_parms(): no params data found [ 250.068502][ T7300] IPVS: ftp: loaded support on port[0] = 21 [ 250.085219][ T6865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.124921][ T6995] team0: Port device team_slave_0 added [ 250.142585][ T7134] chnl_net:caif_netlink_parms(): no params data found [ 250.175355][ T6865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.233213][ T6995] team0: Port device team_slave_1 added [ 250.266254][ T6865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.334618][ T6865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.415932][ T7434] IPVS: ftp: loaded support on port[0] = 21 [ 250.431461][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.443319][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.472285][ T6995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.519102][ T6995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.526189][ T6995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.557709][ T6995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.594182][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.602385][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.613107][ T7045] device bridge_slave_0 entered promiscuous mode [ 250.624764][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.632689][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.641369][ T7045] device bridge_slave_1 entered promiscuous mode [ 250.662923][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.670164][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.680671][ T7134] device bridge_slave_0 entered promiscuous mode [ 250.707255][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.739553][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.747401][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.755053][ T7134] device bridge_slave_1 entered promiscuous mode [ 250.765778][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.849376][ T6995] device hsr_slave_0 entered promiscuous mode [ 250.878783][ T6995] device hsr_slave_1 entered promiscuous mode [ 250.936368][ T6995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.944137][ T6995] Cannot create hsr debugfs directory [ 250.966039][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.988365][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.032069][ T7045] team0: Port device team_slave_0 added [ 251.045058][ T7045] team0: Port device team_slave_1 added [ 251.054392][ T7134] team0: Port device team_slave_0 added [ 251.063407][ T7134] team0: Port device team_slave_1 added [ 251.182470][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.189899][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.217067][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.238390][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.245355][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.271854][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.299827][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.307210][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.334166][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.351994][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.359479][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.386645][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.474963][ T7300] chnl_net:caif_netlink_parms(): no params data found [ 251.519988][ T7134] device hsr_slave_0 entered promiscuous mode [ 251.576540][ T7134] device hsr_slave_1 entered promiscuous mode [ 251.616145][ T7134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.623713][ T7134] Cannot create hsr debugfs directory [ 251.691733][ T7045] device hsr_slave_0 entered promiscuous mode [ 251.736485][ T7045] device hsr_slave_1 entered promiscuous mode [ 251.776335][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.783950][ T7045] Cannot create hsr debugfs directory [ 251.847747][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 252.011693][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.023657][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.032678][ T7300] device bridge_slave_0 entered promiscuous mode [ 252.046955][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.054042][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.063311][ T7300] device bridge_slave_1 entered promiscuous mode [ 252.079850][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.105025][ T6995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.158129][ T6995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.248980][ T6995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.305383][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.318251][ T6995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.379684][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.425239][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.441252][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.450556][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.459037][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.467613][ T7434] device bridge_slave_0 entered promiscuous mode [ 252.510503][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.517705][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.525350][ T7434] device bridge_slave_1 entered promiscuous mode [ 252.561473][ T6865] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.571941][ T7300] team0: Port device team_slave_0 added [ 252.581578][ T7300] team0: Port device team_slave_1 added [ 252.600941][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.613201][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.658843][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.679246][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.707248][ T7300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.722208][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.735002][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.744418][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.751684][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.771814][ T7134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.833506][ T7134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.909373][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.916386][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.944276][ T7300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.961563][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.978507][ T7434] team0: Port device team_slave_0 added [ 252.988826][ T7434] team0: Port device team_slave_1 added [ 253.003585][ T7134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.060747][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.069777][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.079081][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.086215][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.093889][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.119485][ T7134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.229305][ T7300] device hsr_slave_0 entered promiscuous mode [ 253.298008][ T7300] device hsr_slave_1 entered promiscuous mode [ 253.335692][ T7300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.343304][ T7300] Cannot create hsr debugfs directory [ 253.356567][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.363537][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.396430][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.415988][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.422971][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.454345][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.469663][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.478286][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.488589][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.497649][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.520234][ T7045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.578615][ T7045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.654580][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.663128][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.680145][ T7045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.794361][ T7045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.828382][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.837302][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.950866][ T7434] device hsr_slave_0 entered promiscuous mode [ 254.007210][ T7434] device hsr_slave_1 entered promiscuous mode [ 254.058827][ T7434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.066529][ T7434] Cannot create hsr debugfs directory [ 254.073228][ T6865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.084760][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.100082][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.108830][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.182394][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.191183][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.224509][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.324534][ T7300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.380801][ T7300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.490241][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.500459][ T7300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.579084][ T7300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.664871][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.676762][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.732479][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.769796][ T6995] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.786981][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.794961][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.808495][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.819038][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.833503][ T7434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.900151][ T7434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.958056][ T6865] device veth0_vlan entered promiscuous mode [ 254.968823][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.976917][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.984585][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.992564][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.006085][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.019347][ T7434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.074281][ T6865] device veth1_vlan entered promiscuous mode [ 255.097314][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.107566][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.119043][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.128151][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.137935][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.144998][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.153669][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.162893][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.171457][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.178689][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.187300][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.196808][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.205475][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.212572][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.227577][ T7434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.303597][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.312165][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.320487][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.330594][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.339588][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.346755][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.354819][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.363845][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.372880][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.381833][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.390874][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.399568][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.421180][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.438171][ T6865] device veth0_macvtap entered promiscuous mode [ 255.452047][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.461307][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.470863][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.498483][ T6865] device veth1_macvtap entered promiscuous mode [ 255.516914][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.524992][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.536496][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.544137][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.597068][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.613906][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.623252][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.632548][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.641355][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.650405][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.659399][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.668729][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.679585][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.688589][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.697744][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.721609][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.737288][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.760778][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.788256][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.797362][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.808227][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.817681][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.832138][ T7134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.848907][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.866190][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.874654][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.883564][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.892608][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.908884][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.945868][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.954607][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.971181][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.978351][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.989731][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.998114][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.021742][ T7300] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.100372][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.110120][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.118886][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.127464][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.137335][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.145998][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.154011][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.167301][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.206446][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.213329][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.224119][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.231896][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.243727][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.257038][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.270698][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.279724][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.286845][ T2563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.307757][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.424260][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.433327][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.449207][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.461684][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.468832][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.487603][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.498506][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.557321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.576927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.590886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 00:41:48 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 256.600455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.625783][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.634595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.653325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.669827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.682656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.696507][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.718161][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 00:41:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x5, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x0) [ 256.759125][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.772597][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.783205][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.798226][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.819694][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.831855][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.848174][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.860341][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.880734][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.891049][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.900422][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.911873][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:41:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) [ 256.949827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.971331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.983652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.993572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.003681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.017244][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.024338][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.042936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:41:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653960d0ec5d684fa9f01070000053c27bc33760036001500ae47a825d868", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 257.052020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.085635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.128254][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.160615][ T7134] device veth0_vlan entered promiscuous mode 00:41:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0}) [ 257.180837][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.188933][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.198044][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.209945][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.219527][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.229336][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.238465][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.245693][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.254002][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.264769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.272596][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.314459][ T8144] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 257.324215][ T6995] device veth0_vlan entered promiscuous mode [ 257.350419][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:41:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000440)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 257.358283][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.367497][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.385764][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.403521][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.472885][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.496787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.505181][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.512669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.522915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.532576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.541308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.550751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.563304][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.574320][ T7134] device veth1_vlan entered promiscuous mode [ 257.593614][ T6995] device veth1_vlan entered promiscuous mode [ 257.604139][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.623595][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.637147][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.752928][ T6995] device veth0_macvtap entered promiscuous mode [ 257.761467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.773868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.783491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.792227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.802396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.828344][ T6995] device veth1_macvtap entered promiscuous mode [ 257.839205][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.847571][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.855519][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.862979][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.872116][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.896487][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.936887][ T7134] device veth0_macvtap entered promiscuous mode [ 257.950651][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 257.965060][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.978618][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.992178][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.001243][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.010782][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.019704][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.029191][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.038723][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.047537][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.058983][ T7134] device veth1_macvtap entered promiscuous mode [ 258.083532][ T6995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.098698][ T6995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.110636][ T6995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.121235][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.129686][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.142159][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.150135][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.159270][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.188616][ T7045] device veth0_vlan entered promiscuous mode [ 258.196936][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.208878][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.218695][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.227816][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.238656][ T7300] device veth0_vlan entered promiscuous mode [ 258.261387][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.272041][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.340009][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.351377][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.362958][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.373899][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.386113][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.448116][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.457331][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.472331][ T7300] device veth1_vlan entered promiscuous mode [ 258.488288][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.504345][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.518863][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.530147][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.545390][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.610185][ T7045] device veth1_vlan entered promiscuous mode [ 258.624196][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.633657][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.679038][ T7434] device veth0_vlan entered promiscuous mode [ 258.718827][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 00:41:50 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000380)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b7d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}, {0x0, 0x0, 0xffffffff}], 0x1000001, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 258.742036][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.761735][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.785690][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.825105][ T8171] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 258.854463][ T8171] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 258.864215][ T8171] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 258.867356][ T7434] device veth1_vlan entered promiscuous mode [ 258.910561][ T7045] device veth0_macvtap entered promiscuous mode [ 258.942816][ T8171] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 00:41:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) openat$vcs(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 258.990701][ T7300] device veth0_macvtap entered promiscuous mode [ 259.029548][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.045686][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.053863][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.077148][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.089475][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.099221][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.104334][ C1] hrtimer: interrupt took 47944 ns [ 259.129578][ T7045] device veth1_macvtap entered promiscuous mode [ 259.190337][ T7300] device veth1_macvtap entered promiscuous mode [ 259.215509][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.226197][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.237377][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.247893][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.257888][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.270525][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.282106][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.291119][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.300307][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.308658][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.316906][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.325362][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.333852][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.416456][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.437307][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.465890][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.480822][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.500244][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.513205][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.529781][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.546160][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.557620][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.568466][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.580244][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.590691][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.601631][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.612299][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.623267][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.635205][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.653331][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.663137][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.689663][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.699077][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.714418][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.723229][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.746919][ T7434] device veth0_macvtap entered promiscuous mode [ 259.758771][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.780533][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.791624][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.802177][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.812516][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.823025][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.832927][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.843401][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.857087][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.874716][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.882790][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.892615][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.903144][ T7434] device veth1_macvtap entered promiscuous mode [ 260.097694][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.115772][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.132642][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.150581][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.161044][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.181670][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.192515][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.203098][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.213212][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.224964][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.236389][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.297190][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.310936][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.319824][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.336804][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.347286][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.357533][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.368780][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.378689][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.389178][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.399076][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.410877][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.420832][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.431355][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.443174][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.502650][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.526659][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:41:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) 00:41:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) waitid(0x1, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(0xffffffffffffffff) 00:41:52 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) [ 260.536775][ T8188] AppArmor: change_hat: Invalid input '0Ë' [ 260.642790][ T29] audit: type=1400 audit(1594341712.708:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8194 comm="syz-executor.2" [ 260.768643][ T8203] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 260.803470][ T8206] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 260.834536][ T8204] splice write not supported for file /vbi5 (pid: 8204 comm: syz-executor.1) 00:41:52 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$KDDELIO(0xffffffffffffffff, 0x80004506, 0x101) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0, 0x380}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='numa_maps\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000002c0)={0x5, 0x1, 0x7ff, 0x3f, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:41:52 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) 00:41:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x28, r1, 0x701, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 00:41:52 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 00:41:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 00:41:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000100000001000100", @ANYRES32=r0, @ANYRES32=r0], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pwrite64(r1, &(0x7f0000000000)="b5", 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x2e, &(0x7f0000000400)=0x0) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0x1c030011, 0x0, 0x1c030011, 0x64, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote}, 0xa000000, 0x70, 0xb8, 0x258, {0x900000000000000}}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) setsockopt(0xffffffffffffffff, 0x80000000, 0x100, &(0x7f0000000100)="6005a0bc3b4bf8", 0x7) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r3) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x10001b, r3, 0x0, 0xffffffe4}) 00:41:53 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) 00:41:53 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x57, 0x0, 0x1, 0x0, @private, @local}, @redirect={0x4, 0x0, 0x0, @rand_addr, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) 00:41:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 00:41:53 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup2(r0, r2) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000000)) 00:41:53 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='lo\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb000000, 0x7, 0x24c20082, r3}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x5) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb000000, 0x7, 0x24c20082, r7}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_delroute={0xa4, 0x19, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x20, 0x14, 0x2, 0xff, 0x3, 0xfd, 0x2, 0x800}, [@RTA_MARK={0x8}, @RTA_ENCAP={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x53, 0x5, r3}}, @RTA_MARK={0x8, 0x10, 0x3ff}, @RTA_IIF={0x8, 0x3, r7}, @RTA_UID={0x8}, @RTA_ENCAP={0x55, 0x16, 0x0, 0x1, @generic="f8e172da577d82cb6ea69f2a4a91629c119c7a6490dcf456e7373d97c873fc087f34a5067e5f3b6cb823f6f6d97655ac8a6a5fe654222e82bd531c8ae80e803b748ce93e1757f74ceb82b5718b6f6dcdd1"}]}, 0xa4}}, 0x0) accept4(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0xc0000) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="33134417391e", @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) 00:41:53 executing program 4: memfd_create(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x400000000}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) 00:41:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x70bd2b}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 00:41:53 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup2(r0, r2) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000000)) 00:41:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x20300, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0xa, 0x0, 0x4, 0x80, 0x1, r2, 0x1f, [], r3, 0xffffffffffffffff, 0x3, 0x2}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='numa_maps\x00') readv(r4, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000300)) dup2(r0, r1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000280)="800024003804000019000300e60100006c00fec9000000000100000001000000000700000027000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000380)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b7d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}, {0x0, 0x0, 0xffffffff}], 0x0, 0x0) 00:41:53 executing program 4: sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffff1e, 0x0, 0xa}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x134, 0x17c, 0x17c, 0x134, 0x5, 0x218, 0x260, 0x260, 0x218, 0x260, 0x3, 0x0, {[{{@uncond=[0x7a, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x134, 0x52020000, {}, [@common=@unspec=@state={{0x24, 'state\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @common=@inet=@SET3={0x34, 'SET\x00'}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x33c) 00:41:53 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='lo\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb000000, 0x7, 0x24c20082, r3}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x5) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890c, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb000000, 0x7, 0x24c20082, r7}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_delroute={0xa4, 0x19, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x20, 0x14, 0x2, 0xff, 0x3, 0xfd, 0x2, 0x800}, [@RTA_MARK={0x8}, @RTA_ENCAP={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x53, 0x5, r3}}, @RTA_MARK={0x8, 0x10, 0x3ff}, @RTA_IIF={0x8, 0x3, r7}, @RTA_UID={0x8}, @RTA_ENCAP={0x55, 0x16, 0x0, 0x1, @generic="f8e172da577d82cb6ea69f2a4a91629c119c7a6490dcf456e7373d97c873fc087f34a5067e5f3b6cb823f6f6d97655ac8a6a5fe654222e82bd531c8ae80e803b748ce93e1757f74ceb82b5718b6f6dcdd1"}]}, 0xa4}}, 0x0) accept4(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0xc0000) [ 261.841302][ T2431] ------------[ cut here ]------------ [ 261.847250][ T2431] WARNING: CPU: 1 PID: 2431 at kernel/kthread.c:819 kthread_queue_work+0x16d/0x1b0 [ 261.856527][ T2431] Kernel panic - not syncing: panic_on_warn set ... [ 261.863098][ T2431] CPU: 1 PID: 2431 Comm: kworker/1:1H Not tainted 5.8.0-rc4-next-20200708-syzkaller #0 [ 261.872730][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.882875][ T2431] Workqueue: kblockd blk_mq_run_work_fn [ 261.888413][ T2431] Call Trace: [ 261.891768][ T2431] dump_stack+0x18f/0x20d [ 261.896148][ T2431] panic+0x2e3/0x75c [ 261.900026][ T2431] ? __warn_printk+0xf3/0xf3 [ 261.904666][ T2431] ? printk+0xba/0xed [ 261.908643][ T2431] ? log_store.cold+0x16/0x16 [ 261.913296][ T2431] ? __warn.cold+0x5/0x45 [ 261.917603][ T2431] ? __warn+0xd6/0x1f2 [ 261.921649][ T2431] ? kthread_queue_work+0x16d/0x1b0 [ 261.926825][ T2431] __warn.cold+0x20/0x45 [ 261.931046][ T2431] ? kthread_queue_work+0x16d/0x1b0 [ 261.936232][ T2431] report_bug+0x1bd/0x210 [ 261.940596][ T2431] handle_bug+0x38/0x90 [ 261.944746][ T2431] exc_invalid_op+0x13/0x40 [ 261.949273][ T2431] asm_exc_invalid_op+0x12/0x20 [ 261.954125][ T2431] RIP: 0010:kthread_queue_work+0x16d/0x1b0 [ 261.959907][ T2431] Code: 0f 85 72 ff ff ff e8 62 49 26 00 48 8d 55 48 4c 89 e6 48 89 ef e8 63 ec ff ff 41 bc 01 00 00 00 e9 56 ff ff ff e8 43 49 26 00 <0f> 0b 45 31 e4 e9 47 ff ff ff 48 c7 c7 f4 61 af 8a e8 dd fd 65 00 [ 261.979493][ T2431] RSP: 0018:ffffc90007d3f8e8 EFLAGS: 00010093 [ 261.985538][ T2431] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff814db478 [ 261.993493][ T2431] RDX: ffff8880a13f41c0 RSI: ffffffff814db4ed RDI: ffff8880a1adc1c0 [ 262.001446][ T2431] RBP: ffff8880a1adc158 R08: 0000000000000001 R09: 0000000000000003 [ 262.009399][ T2431] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a1bb3068 [ 262.017451][ T2431] R13: 0000000000000286 R14: ffff8880a1adc160 R15: dffffc0000000000 [ 262.025424][ T2431] ? kthread_queue_work+0xf8/0x1b0 [ 262.030521][ T2431] ? kthread_queue_work+0x16d/0x1b0 [ 262.035704][ T2431] ? kthread_queue_work+0x16d/0x1b0 [ 262.040959][ T2431] loop_queue_rq+0x428/0x590 [ 262.045639][ T2431] blk_mq_dispatch_rq_list+0x2e0/0x1e40 [ 262.051219][ T2431] ? elv_rb_del+0x50/0x90 [ 262.055529][ T2431] ? blk_mq_dequeue_from_ctx+0x810/0x810 [ 262.062012][ T2431] ? do_raw_spin_unlock+0x171/0x230 [ 262.067194][ T2431] ? _raw_spin_unlock+0x24/0x40 [ 262.072084][ T2431] ? dd_dispatch_request+0x225/0x880 [ 262.077360][ T2431] __blk_mq_do_dispatch_sched+0x3bc/0x870 [ 262.083069][ T2431] ? blk_mq_sched_free_hctx_data+0x1e0/0x1e0 [ 262.089050][ T2431] ? lock_acquire+0x1f1/0xad0 [ 262.093719][ T2431] ? hctx_lock+0x7f/0x1d0 [ 262.098051][ T2431] __blk_mq_sched_dispatch_requests+0x394/0x490 [ 262.104285][ T2431] ? blk_mq_do_dispatch_ctx+0x610/0x610 [ 262.109822][ T2431] ? lock_acquire+0x1f1/0xad0 [ 262.114521][ T2431] ? process_one_work+0x85f/0x1670 [ 262.119614][ T2431] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 262.125571][ T2431] __blk_mq_run_hw_queue+0x13a/0x2d0 [ 262.130835][ T2431] ? trace_block_unplug+0x300/0x300 [ 262.136021][ T2431] ? _raw_spin_unlock_irq+0x1f/0x80 [ 262.141198][ T2431] ? lock_is_held_type+0xb0/0xe0 [ 262.146119][ T2431] blk_mq_run_work_fn+0x55/0x70 [ 262.150967][ T2431] process_one_work+0x94c/0x1670 [ 262.155899][ T2431] ? lock_release+0x8d0/0x8d0 [ 262.160557][ T2431] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 262.166010][ T2431] ? rwlock_bug.part.0+0x90/0x90 [ 262.170927][ T2431] ? lockdep_hardirqs_off+0x66/0xa0 [ 262.176106][ T2431] worker_thread+0x64c/0x1120 [ 262.180784][ T2431] ? __kthread_parkme+0x13f/0x1e0 [ 262.185802][ T2431] ? process_one_work+0x1670/0x1670 [ 262.190977][ T2431] kthread+0x3b5/0x4a0 [ 262.195023][ T2431] ? __kthread_bind_mask+0xc0/0xc0 [ 262.200117][ T2431] ? __kthread_bind_mask+0xc0/0xc0 [ 262.205261][ T2431] ret_from_fork+0x1f/0x30 [ 263.272113][ T2431] Shutting down cpus with NMI [ 263.277913][ T2431] Kernel Offset: disabled [ 263.282316][ T2431] Rebooting in 86400 seconds..