[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.58' (ECDSA) to the list of known hosts. 2020/03/26 23:24:39 fuzzer started 2020/03/26 23:24:40 dialing manager at 10.128.0.26:33655 2020/03/26 23:24:40 syscalls: 3028 2020/03/26 23:24:40 code coverage: enabled 2020/03/26 23:24:40 comparison tracing: enabled 2020/03/26 23:24:40 extra coverage: enabled 2020/03/26 23:24:40 setuid sandbox: enabled 2020/03/26 23:24:40 namespace sandbox: enabled 2020/03/26 23:24:40 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/26 23:24:40 fault injection: enabled 2020/03/26 23:24:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/26 23:24:40 net packet injection: enabled 2020/03/26 23:24:40 net device setup: enabled 2020/03/26 23:24:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/26 23:24:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:25:50 executing program 0: syzkaller login: [ 109.390503][ T7208] IPVS: ftp: loaded support on port[0] = 21 23:25:50 executing program 1: [ 109.508830][ T7208] chnl_net:caif_netlink_parms(): no params data found [ 109.646216][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.672885][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.680862][ T7208] device bridge_slave_0 entered promiscuous mode [ 109.694459][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.711463][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.721141][ T7208] device bridge_slave_1 entered promiscuous mode 23:25:51 executing program 2: [ 109.742126][ T7208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.753410][ T7208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.757072][ T7338] IPVS: ftp: loaded support on port[0] = 21 [ 109.775785][ T7208] team0: Port device team_slave_0 added [ 109.784997][ T7208] team0: Port device team_slave_1 added [ 109.819373][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.827276][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.855075][ T7208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.873630][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.880589][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.907929][ T7208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 23:25:51 executing program 3: [ 109.994431][ T7208] device hsr_slave_0 entered promiscuous mode [ 110.051777][ T7208] device hsr_slave_1 entered promiscuous mode [ 110.145079][ T7388] IPVS: ftp: loaded support on port[0] = 21 23:25:51 executing program 4: [ 110.378447][ T7338] chnl_net:caif_netlink_parms(): no params data found [ 110.416257][ T7486] IPVS: ftp: loaded support on port[0] = 21 23:25:51 executing program 5: [ 110.659985][ T7208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.758286][ T7208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.804039][ T7208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.873585][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.880651][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.888841][ T7338] device bridge_slave_0 entered promiscuous mode [ 110.898978][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.906203][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.914227][ T7338] device bridge_slave_1 entered promiscuous mode [ 110.927269][ T7208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.983191][ T7388] chnl_net:caif_netlink_parms(): no params data found [ 111.002820][ T7658] IPVS: ftp: loaded support on port[0] = 21 [ 111.015147][ T7657] IPVS: ftp: loaded support on port[0] = 21 [ 111.030127][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.056134][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.112500][ T7338] team0: Port device team_slave_0 added [ 111.122870][ T7338] team0: Port device team_slave_1 added [ 111.190930][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.197890][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.225073][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.236821][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.245274][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.253834][ T7388] device bridge_slave_0 entered promiscuous mode [ 111.262360][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.269453][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.278771][ T7388] device bridge_slave_1 entered promiscuous mode [ 111.296183][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.304238][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.330394][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.404219][ T7338] device hsr_slave_0 entered promiscuous mode [ 111.442901][ T7338] device hsr_slave_1 entered promiscuous mode [ 111.481843][ T7338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.489652][ T7338] Cannot create hsr debugfs directory [ 111.548620][ T7388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.570626][ T7388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.625305][ T7486] chnl_net:caif_netlink_parms(): no params data found [ 111.697626][ T7388] team0: Port device team_slave_0 added [ 111.729800][ T7657] chnl_net:caif_netlink_parms(): no params data found [ 111.748838][ T7388] team0: Port device team_slave_1 added [ 111.768502][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.775873][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.786566][ T7486] device bridge_slave_0 entered promiscuous mode [ 111.820610][ T7208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.843568][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.850636][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.863851][ T7486] device bridge_slave_1 entered promiscuous mode [ 111.892797][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.900706][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.934679][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.943358][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.970995][ T7388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.996155][ T7486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.006835][ T7208] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.015664][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.023052][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.049338][ T7388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.066423][ T7658] chnl_net:caif_netlink_parms(): no params data found [ 112.082516][ T7486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.115872][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.124041][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.131879][ T7657] device bridge_slave_0 entered promiscuous mode [ 112.143130][ T7486] team0: Port device team_slave_0 added [ 112.154152][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.165005][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.175061][ T2806] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.182246][ T2806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.194930][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.211052][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.218189][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.228108][ T7657] device bridge_slave_1 entered promiscuous mode [ 112.236645][ T7486] team0: Port device team_slave_1 added [ 112.286755][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.299905][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.309531][ T2751] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.316633][ T2751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.325091][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.372938][ T7388] device hsr_slave_0 entered promiscuous mode [ 112.411205][ T7388] device hsr_slave_1 entered promiscuous mode [ 112.470924][ T7388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.478489][ T7388] Cannot create hsr debugfs directory [ 112.493883][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.505982][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.552500][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.564201][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.573351][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.583379][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.592454][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.609624][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.624251][ T7657] team0: Port device team_slave_0 added [ 112.630398][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.637420][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.663754][ T7486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.680206][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.687463][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.716745][ T7486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.728312][ T7338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.787022][ T7657] team0: Port device team_slave_1 added [ 112.793007][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.800044][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.808259][ T7658] device bridge_slave_0 entered promiscuous mode [ 112.817663][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.825014][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.833043][ T7658] device bridge_slave_1 entered promiscuous mode [ 112.840319][ T7338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.894431][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.908749][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.933644][ T7338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.983118][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.990187][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.018108][ T7657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.073553][ T7486] device hsr_slave_0 entered promiscuous mode [ 113.121110][ T7486] device hsr_slave_1 entered promiscuous mode [ 113.162993][ T7486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.170625][ T7486] Cannot create hsr debugfs directory [ 113.176950][ T7338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.238527][ T7208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.250190][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.258569][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.267387][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.276875][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.284424][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.311100][ T7657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.323547][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.352023][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.378181][ T7658] team0: Port device team_slave_0 added [ 113.425318][ T7658] team0: Port device team_slave_1 added [ 113.462688][ T7657] device hsr_slave_0 entered promiscuous mode [ 113.511260][ T7657] device hsr_slave_1 entered promiscuous mode [ 113.551220][ T7657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.558783][ T7657] Cannot create hsr debugfs directory [ 113.567920][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.575408][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.621637][ T7208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.670083][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.677511][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.703854][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.718678][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.725990][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.752606][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.860857][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.869796][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.879286][ T7388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.003528][ T7658] device hsr_slave_0 entered promiscuous mode [ 114.021139][ T7658] device hsr_slave_1 entered promiscuous mode [ 114.061438][ T7658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.069134][ T7658] Cannot create hsr debugfs directory [ 114.108834][ T7388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.146515][ T7388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.196043][ T7388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.258700][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.269847][ T7486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.304516][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.312976][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.322563][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.330138][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.339615][ T7208] device veth0_vlan entered promiscuous mode [ 114.368126][ T7486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.412580][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.430176][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.439092][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.448475][ T7486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.502975][ T7486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.564087][ T7208] device veth1_vlan entered promiscuous mode [ 114.573895][ T7657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.636607][ T7657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.694631][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.703652][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.712228][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.721370][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.729586][ T2801] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.736760][ T2801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.744879][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.753971][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.762732][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.769787][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.777713][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.786837][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.795547][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.804310][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.814451][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.822798][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.844736][ T7657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.905708][ T7208] device veth0_macvtap entered promiscuous mode [ 114.919668][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.929159][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.938261][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.948397][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.960793][ T7657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.025508][ T7208] device veth1_macvtap entered promiscuous mode [ 115.047018][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.055260][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.064187][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.075316][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.084058][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.092470][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.118285][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.134569][ T7338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.146628][ T7388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.155781][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.164964][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.177839][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.197914][ T7658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.232657][ T7658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.263325][ T7658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.312089][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.320474][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.354263][ T7658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.426645][ T7388] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.450172][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.458191][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.467251][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.475042][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.484004][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.492959][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.502248][ T2751] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.509293][ T2751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.563522][ T7486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.573927][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.587895][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 23:25:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) [ 115.711203][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.719027][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.760461][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 23:25:57 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, &(0x7f00000002c0)=""/158, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b1d4473b8a894043a6ed87698efa57cff39e479745c34c8fff8317bfade60e5641c4e110500922a32cd3fa8fd59cc40f645acae20ab0fedfe510eb587915fd123224306ca134c855fd57300602abefde2454c32bb604ec275dea0c1b1759b20f3ef2e5fc7fd27160ec184f77f8b579ef33"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca00000800ffffffba0e7200ffff08", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) [ 115.847172][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.855977][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.868465][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.883539][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.896992][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.904206][ T2782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.921829][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.935289][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:25:57 executing program 0: r0 = openat$vimc2(0xffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fc610c8f"}}) [ 115.946770][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.964006][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.975529][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.987224][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 23:25:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b6b, 0x0) [ 116.001940][ T7486] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.026628][ T7388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 23:25:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b6b, 0x0) [ 116.042859][ T7388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.065723][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.081794][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.089695][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.108655][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.132501][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.151030][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 23:25:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b6b, 0x0) [ 116.159402][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.176979][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 23:25:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b6b, 0x0) [ 116.224579][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.239192][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.249569][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.277074][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.284208][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.302395][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.327584][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.341861][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.349060][ T2782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.363605][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.408522][ T7338] device veth0_vlan entered promiscuous mode [ 116.423054][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.433541][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.443276][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.453348][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.462356][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.471158][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.479184][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.488238][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.497872][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.504958][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.515271][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.523863][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.532317][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.539350][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.566528][ T7338] device veth1_vlan entered promiscuous mode [ 116.578213][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.586503][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.594615][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.602323][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.610294][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.618413][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.626553][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.635255][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.643902][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.652143][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.659688][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.668609][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.677286][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.685706][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.707976][ T7658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.720056][ T7486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.733245][ T7486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.741538][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.750140][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.759204][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.768113][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.776710][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.785527][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.794133][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.814471][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.834024][ T7657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.845273][ T7657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.857110][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.865725][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.874416][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.882885][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.897637][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.905467][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.914740][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.930532][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.937920][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.948787][ T7338] device veth0_macvtap entered promiscuous mode [ 116.967421][ T7486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.988302][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.996619][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.008284][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.017041][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.025654][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.038518][ T7658] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.052465][ T7338] device veth1_macvtap entered promiscuous mode [ 117.084578][ T7388] device veth0_vlan entered promiscuous mode [ 117.092598][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.100318][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.108543][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.116041][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.124193][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.152549][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.160795][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.168413][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.177436][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.186556][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.193680][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.202782][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.213222][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.221825][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.228863][ T2782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.237010][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.263593][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.274307][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.287460][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.299749][ T7388] device veth1_vlan entered promiscuous mode [ 117.307459][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.315651][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.323937][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.332915][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.342089][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.351257][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.359631][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.368426][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.377660][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.387160][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.398323][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.410286][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.421975][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.440309][ T7486] device veth0_vlan entered promiscuous mode [ 117.448441][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.458971][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.467777][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.476347][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.485474][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.494449][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.505261][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.516133][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.543981][ T7486] device veth1_vlan entered promiscuous mode [ 117.555550][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.565657][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.578501][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.586913][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.595715][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.604155][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.612803][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.673379][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.683924][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.692871][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.712685][ T7388] device veth0_macvtap entered promiscuous mode [ 117.761627][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.769638][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.797791][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.806409][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.815137][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.824638][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.838312][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.847710][ T7388] device veth1_macvtap entered promiscuous mode [ 117.861730][ T7486] device veth0_macvtap entered promiscuous mode 23:25:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b63"], 0x2) [ 117.906001][ T7486] device veth1_macvtap entered promiscuous mode [ 117.939598][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.956137][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.967022][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.985663][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.004283][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.034361][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.046402][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.073792][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.085337][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.109209][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.120224][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.131574][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.144292][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.156477][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.167317][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.178755][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.188563][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.200629][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.211704][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.222852][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.234616][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.243128][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.254409][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.263147][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.272195][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.280926][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.289252][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.305746][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.317479][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.328411][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.338961][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.348951][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.359421][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.371558][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.404611][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.414084][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.423009][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.431954][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.681629][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.689776][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.698886][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.707409][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.715310][ T7657] device veth0_vlan entered promiscuous mode [ 118.732994][ T7658] device veth0_vlan entered promiscuous mode [ 118.763579][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.771881][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.805602][ T7658] device veth1_vlan entered promiscuous mode [ 118.880264][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.890935][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.916567][ T7657] device veth1_vlan entered promiscuous mode 23:26:00 executing program 2: 23:26:00 executing program 0: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b6b, 0x0) [ 118.992904][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.011864][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.052944][ T7658] device veth0_macvtap entered promiscuous mode [ 119.061464][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.069348][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.111727][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.122587][ T7657] device veth0_macvtap entered promiscuous mode [ 119.133036][ T7658] device veth1_macvtap entered promiscuous mode [ 119.166964][ T7657] device veth1_macvtap entered promiscuous mode [ 119.193825][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.204334][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.215077][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.226193][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.236469][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.247627][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.257833][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.270208][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.281651][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.291888][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.299640][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.308056][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.316180][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.324896][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.336389][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.348534][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.359040][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.370330][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.380134][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.391478][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.401574][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.412049][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.425130][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.436691][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.448180][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.458368][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.468994][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.478852][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.489506][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.499345][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.511962][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.522010][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.532736][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.544232][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.552065][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.563319][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.571931][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.580218][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.604599][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.615140][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.626575][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.637043][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.646902][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.657512][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.667784][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.678408][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.688284][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.698732][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.709927][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.720365][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.728827][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:26:01 executing program 4: 23:26:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x30, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "012498eb0d61c42300cc7c5eb0756044"}]}}}}}}}}, 0x0) 23:26:01 executing program 3: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x7ff]}, 0x8}) 23:26:01 executing program 0: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b6b, 0x0) 23:26:01 executing program 2: 23:26:01 executing program 5: 23:26:01 executing program 2: 23:26:01 executing program 5: 23:26:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 23:26:01 executing program 0: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b6b, 0x0) 23:26:01 executing program 1: 23:26:01 executing program 3: 23:26:01 executing program 5: 23:26:01 executing program 2: 23:26:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b6b, 0x0) 23:26:01 executing program 5: 23:26:01 executing program 1: 23:26:01 executing program 3: [ 120.233399][ T8545] mmap: syz-executor.4 (8545) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 23:26:01 executing program 2: 23:26:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b6b, 0x0) 23:26:01 executing program 4: 23:26:01 executing program 5: 23:26:01 executing program 1: 23:26:01 executing program 3: 23:26:01 executing program 2: 23:26:01 executing program 4: 23:26:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b6b, 0x0) 23:26:01 executing program 2: 23:26:01 executing program 1: 23:26:01 executing program 5: 23:26:01 executing program 3: 23:26:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b6b, 0x0) 23:26:01 executing program 4: 23:26:01 executing program 2: 23:26:01 executing program 5: 23:26:01 executing program 1: 23:26:02 executing program 3: 23:26:02 executing program 4: 23:26:02 executing program 2: 23:26:02 executing program 0: 23:26:02 executing program 5: 23:26:02 executing program 1: 23:26:02 executing program 3: 23:26:02 executing program 2: 23:26:02 executing program 4: 23:26:02 executing program 0: 23:26:02 executing program 5: 23:26:02 executing program 1: 23:26:02 executing program 3: 23:26:02 executing program 2: 23:26:02 executing program 4: 23:26:02 executing program 3: 23:26:02 executing program 1: 23:26:02 executing program 5: 23:26:02 executing program 0: 23:26:02 executing program 2: 23:26:02 executing program 4: 23:26:02 executing program 1: 23:26:02 executing program 3: 23:26:02 executing program 5: 23:26:02 executing program 0: 23:26:02 executing program 2: 23:26:02 executing program 3: 23:26:02 executing program 5: 23:26:02 executing program 4: 23:26:02 executing program 1: 23:26:02 executing program 2: 23:26:02 executing program 0: 23:26:02 executing program 3: 23:26:02 executing program 4: 23:26:02 executing program 5: 23:26:02 executing program 1: 23:26:02 executing program 2: 23:26:02 executing program 0: 23:26:02 executing program 5: 23:26:02 executing program 3: 23:26:02 executing program 1: 23:26:02 executing program 4: 23:26:02 executing program 1: 23:26:02 executing program 0: 23:26:02 executing program 2: 23:26:02 executing program 3: 23:26:02 executing program 4: 23:26:02 executing program 5: 23:26:02 executing program 1: 23:26:02 executing program 3: 23:26:02 executing program 0: 23:26:02 executing program 2: 23:26:02 executing program 4: 23:26:03 executing program 1: 23:26:03 executing program 3: 23:26:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 23:26:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ee0020000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, 0x3, 0x8, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x18}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x64a}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() pipe(&(0x7f0000000300)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000108000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="00004000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b000000000018b0b31277508554c10a5328f4c6d47dfb7878aebefedb5e5c2fef5ca0f842fa9833b64d2ab8ea7981be35e24047f7df75c6f1b500236fb5056d1ff72f7d49361330ecf189f823af4f4a3d7d5d445a029a1db66f4a8aed74273acd09b66a292509fc674f66ca604e"], 0x34}, 0x1, 0xfcffffff00000000}, 0x0) socket(0x10, 0x3, 0x0) 23:26:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0xb}], 0x18}], 0x146, 0xb700) 23:26:03 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) lseek(r0, 0x0, 0x0) 23:26:03 executing program 1: 23:26:03 executing program 3: [ 121.818229][ C1] hrtimer: interrupt took 51269 ns 23:26:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) 23:26:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080601030000000000000000000000000500010006000000a737ed09dda8515b09ff109a9ae441d97bb0056c92a21b2ffc30afa10934b70001d3bc4928563cbab68991634508b8467392e44ccc76245947df129bd98f55c80f4f2f1fd2ab6b932a9f8e4bc1572b473d63df59c8"], 0x1c}}, 0x0) 23:26:03 executing program 5: syz_emit_ethernet(0x4c, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x16, 0x6, 0x0, @remote, @local={0xfe, 0x80, [0x4]}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {'zQ'}}}}}}}, 0x0) [ 121.839484][ T8654] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 23:26:03 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x8100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xc8) [ 121.950888][ T8654] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. 23:26:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) 23:26:03 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000180)='\xa5E\f\x87\xda\n\xd9F3\x92\xe6e\xe4\xec\xad\x1c.\b\x06\xa76\x82F\xff\xff\xff\x7f\x00\x00\x00\x00\x9af\xaeM\xc4', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x2ffe00) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc8000003, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='autogroup\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 23:26:03 executing program 3: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000fc48f6f9f83e500000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249269c, 0x0) 23:26:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ee0020000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, 0x3, 0x8, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x18}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x64a}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() pipe(&(0x7f0000000300)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000108000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="00004000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b000000000018b0b31277508554c10a5328f4c6d47dfb7878aebefedb5e5c2fef5ca0f842fa9833b64d2ab8ea7981be35e24047f7df75c6f1b500236fb5056d1ff72f7d49361330ecf189f823af4f4a3d7d5d445a029a1db66f4a8aed74273acd09b66a292509fc674f66ca604e"], 0x34}, 0x1, 0xfcffffff00000000}, 0x0) socket(0x10, 0x3, 0x0) [ 122.117179][ T8680] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:26:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x24) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000700000000000008001c00ef000000"], 0x28}}, 0x0) [ 122.198305][ T8688] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.279979][ T8688] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 122.311301][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 122.882286][ T8695] device wg0 entered promiscuous mode 23:26:04 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) lseek(r0, 0x0, 0x0) 23:26:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22d202e2, r3}) 23:26:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ee0020000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, 0x3, 0x8, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x18}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x64a}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() pipe(&(0x7f0000000300)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000108000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="00004000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b000000000018b0b31277508554c10a5328f4c6d47dfb7878aebefedb5e5c2fef5ca0f842fa9833b64d2ab8ea7981be35e24047f7df75c6f1b500236fb5056d1ff72f7d49361330ecf189f823af4f4a3d7d5d445a029a1db66f4a8aed74273acd09b66a292509fc674f66ca604e"], 0x34}, 0x1, 0xfcffffff00000000}, 0x0) socket(0x10, 0x3, 0x0) 23:26:04 executing program 3: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000fc48f6f9f83e500000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249269c, 0x0) 23:26:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x24) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000700000000000008001c00ef000000"], 0x28}}, 0x0) 23:26:04 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:26:05 executing program 3: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000fc48f6f9f83e500000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249269c, 0x0) 23:26:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x200000000000011, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x480, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e224e0004fcff", 0x58}], 0x1) 23:26:05 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x196, 0x7}, 0xc) r0 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d2, 0x3ff}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80b80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x78102180, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 123.703875][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 123.740313][ T8725] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 23:26:05 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000f0000000000000009000800080000b70000", 0x52) [ 123.789586][ T8725] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. 23:26:05 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x1, r1, 0x1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000900000000", @ANYPTR64, @ANYBLOB="000000000000000000000087da4d2c706de97e000000", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/23], @ANYBLOB]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x80000101, 0x4) mlockall(0x1) pipe(&(0x7f0000000280)) pipe(&(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket(0x0, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0xc) [ 123.964102][ T8744] IPVS: ftp: loaded support on port[0] = 21 23:26:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080601030000000000000000000000000500010006000000a737ed09dda8515b09ff109a9ae441d97bb0056c92a21b2ffc30afa10934b70001d3bc4928563cbab68991634508b8467392e44ccc76245947df129bd98f55c80f4f2f1fd2ab6b932a9f8e4bc1572b473d63df59c8"], 0x1c}}, 0x0) [ 124.521085][ T8732] device veth0_to_bridge entered promiscuous mode [ 124.532740][ T2782] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.762671][ T8749] IPVS: ftp: loaded support on port[0] = 21 [ 124.836518][ T8754] EXT4-fs (loop4): inodes count not valid: 536871552 vs 128 [ 125.185707][ T311] tipc: TX() has been purged, node left! 23:26:07 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) read$char_usb(r0, &(0x7f00000000c0)=""/60, 0x3c) 23:26:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x24) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000700000000000008001c00ef000000"], 0x28}}, 0x0) 23:26:07 executing program 3: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000fc48f6f9f83e500000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249269c, 0x0) 23:26:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040), 0x8) [ 125.703361][ T8754] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 125.778852][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 23:26:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040), 0x8) 23:26:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) 23:26:07 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0xf0, 0x1a, 0x205, 0x0, 0x0, {{@in=@dev, @in=@broadcast}, {@in6=@mcast2}, @in=@loopback}}, 0xf0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfd447a071") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:26:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x2000000000000074, 0x4) [ 126.120907][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.198467][ T8822] device bridge_slave_1 left promiscuous mode [ 126.217408][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.434571][ T8822] device bridge_slave_1 entered promiscuous mode 23:26:14 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x196, 0x7}, 0xc) r0 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d2, 0x3ff}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80b80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x78102180, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 23:26:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) accept4(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, 0x0) 23:26:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x24) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000700000000000008001c00ef000000"], 0x28}}, 0x0) 23:26:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xbf, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x40, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 23:26:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="f1", 0x1) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001ec0), 0x400000000000201, 0x0) 23:26:14 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) read$char_usb(r0, &(0x7f00000000c0)=""/60, 0x3c) 23:26:14 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x196, 0x7}, 0xc) r0 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d2, 0x3ff}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80b80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x78102180, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 23:26:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="f1", 0x1) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001ec0), 0x400000000000201, 0x0) [ 133.444943][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 23:26:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x2000000000000074, 0x4) [ 133.642971][ T8879] IPVS: ftp: loaded support on port[0] = 21 [ 133.763733][ T8885] IPVS: ftp: loaded support on port[0] = 21 23:26:15 executing program 0: 23:26:15 executing program 2: 23:26:15 executing program 0: [ 134.161645][ T8878] device veth1_to_bond entered promiscuous mode [ 134.801159][ T210] tipc: TX() has been purged, node left! 23:26:24 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x196, 0x7}, 0xc) r0 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d2, 0x3ff}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80b80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x78102180, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 23:26:24 executing program 0: 23:26:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x24) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000700000000000008001c00ef000000"], 0x28}}, 0x0) 23:26:24 executing program 2: 23:26:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x2000000000000074, 0x4) 23:26:24 executing program 3: 23:26:25 executing program 3: 23:26:25 executing program 0: 23:26:25 executing program 2: 23:26:25 executing program 3: 23:26:25 executing program 2: 23:26:25 executing program 3: [ 143.846699][ T8975] IPVS: ftp: loaded support on port[0] = 21 [ 144.278080][ T8974] device veth0_to_team entered promiscuous mode 23:26:26 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x196, 0x7}, 0xc) r0 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d2, 0x3ff}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80b80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x78102180, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 23:26:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000033000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x58a02, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x280}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:26:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="8e1a00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_gact={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) 23:26:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000033000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x58a02, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x280}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:26:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32, @ANYBLOB="000700000000000008001c00ef000000"], 0x28}}, 0x0) 23:26:26 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 23:26:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32, @ANYBLOB="000700000000000008001c00ef000000"], 0x28}}, 0x0) 23:26:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="8e1a00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_gact={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) [ 144.779339][ T9029] kvm [9023]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 144.799103][ T7] tipc: TX() has been purged, node left! [ 144.841913][ T9029] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 144.849723][ T9029] #PF: supervisor instruction fetch in kernel mode [ 144.856209][ T9029] #PF: error_code(0x0010) - not-present page [ 144.862172][ T9029] PGD 8f83b067 P4D 8f83b067 PUD 9ee49067 PMD 0 [ 144.868410][ T9029] Oops: 0010 [#1] PREEMPT SMP KASAN [ 144.873604][ T9029] CPU: 0 PID: 9029 Comm: syz-executor.3 Not tainted 5.6.0-rc7-syzkaller #0 [ 144.882177][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.892329][ T9029] RIP: 0010:0x86 [ 144.895874][ T9029] Code: Bad RIP value. [ 144.899930][ T9029] RSP: 0018:ffffc90003ec7998 EFLAGS: 00010086 [ 144.903390][ T9039] IPVS: ftp: loaded support on port[0] = 21 [ 144.905981][ T9029] RAX: ffffc90003ec79c8 RBX: fffffe0000000000 RCX: 0000000000040000 [ 144.905987][ T9029] RDX: ffffc9001018b000 RSI: 0000000000017bd9 RDI: 0000000000017bda [ 144.905993][ T9029] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca [ 144.905999][ T9029] R10: ffff88804933a1c0 R11: 0000000000000002 R12: dffffc0000000000 [ 144.906005][ T9029] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb [ 144.906013][ T9029] FS: 00007ffb5f935700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 144.906018][ T9029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.906024][ T9029] CR2: 000000000000005c CR3: 000000009d69f000 CR4: 00000000001426f0 [ 144.906032][ T9029] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.906045][ T9029] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.991040][ T9029] Call Trace: [ 144.994330][ T9029] ? handle_external_interrupt_irqoff+0x154/0x280 [ 145.000741][ T9029] ? handle_external_interrupt_irqoff+0x132/0x280 [ 145.007157][ T9029] ? __irqentry_text_start+0x8/0x8 [ 145.012273][ T9029] ? vcpu_enter_guest+0x6c77/0x9290 [ 145.017471][ T9029] ? __kasan_slab_free+0x12e/0x1e0 [ 145.022579][ T9029] ? kfree+0x10a/0x220 [ 145.026640][ T9029] ? tomoyo_path_number_perm+0x525/0x690 [ 145.032361][ T9029] ? security_file_ioctl+0x55/0xb0 [ 145.037468][ T9029] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 145.043531][ T9029] ? __lock_acquire+0xc5a/0x1bc0 [ 145.048462][ T9029] ? mark_lock+0x107/0x1650 [ 145.052948][ T9029] ? lock_acquire+0x154/0x250 [ 145.057620][ T9029] ? rcu_lock_acquire+0x9/0x30 [ 145.062372][ T9029] ? kvm_check_async_pf_completion+0x34e/0x360 [ 145.068504][ T9029] ? vcpu_run+0x3a3/0xd50 [ 145.072816][ T9029] ? kvm_arch_vcpu_ioctl_run+0x419/0x880 [ 145.078425][ T9029] ? kvm_vcpu_ioctl+0x67c/0xa80 [ 145.083272][ T9029] ? kvm_vm_release+0x50/0x50 [ 145.087918][ T9029] ? __se_sys_ioctl+0xf9/0x160 [ 145.092653][ T9029] ? do_syscall_64+0xf3/0x1b0 [ 145.097307][ T9029] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 145.103348][ T9029] Modules linked in: [ 145.107228][ T9029] CR2: 0000000000000086 [ 145.111371][ T9029] ---[ end trace b4cb6ef72a7343a9 ]--- [ 145.116810][ T9029] RIP: 0010:0x86 [ 145.120341][ T9029] Code: Bad RIP value. [ 145.124379][ T9029] RSP: 0018:ffffc90003ec7998 EFLAGS: 00010086 [ 145.130418][ T9029] RAX: ffffc90003ec79c8 RBX: fffffe0000000000 RCX: 0000000000040000 [ 145.138368][ T9029] RDX: ffffc9001018b000 RSI: 0000000000017bd9 RDI: 0000000000017bda [ 145.146312][ T9029] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca [ 145.154258][ T9029] R10: ffff88804933a1c0 R11: 0000000000000002 R12: dffffc0000000000 [ 145.162200][ T9029] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb [ 145.170145][ T9029] FS: 00007ffb5f935700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 145.179136][ T9029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.185687][ T9029] CR2: 000000000000005c CR3: 000000009d69f000 CR4: 00000000001426f0 [ 145.193636][ T9029] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.201581][ T9029] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.209612][ T9029] Kernel panic - not syncing: Fatal exception [ 145.216826][ T9029] Kernel Offset: disabled [ 145.221141][ T9029] Rebooting in 86400 seconds..