[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.20' (ECDSA) to the list of known hosts. 2020/07/22 04:58:58 fuzzer started 2020/07/22 04:58:58 dialing manager at 10.128.0.26:37513 2020/07/22 04:58:59 syscalls: 2969 2020/07/22 04:58:59 code coverage: enabled 2020/07/22 04:58:59 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/22 04:58:59 extra coverage: enabled 2020/07/22 04:58:59 setuid sandbox: enabled 2020/07/22 04:58:59 namespace sandbox: enabled 2020/07/22 04:58:59 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/22 04:58:59 fault injection: enabled 2020/07/22 04:58:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/22 04:58:59 net packet injection: enabled 2020/07/22 04:58:59 net device setup: enabled 2020/07/22 04:58:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/22 04:58:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/22 04:58:59 USB emulation: /dev/raw-gadget does not exist 05:02:34 executing program 0: syzkaller login: [ 312.184085][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 312.506999][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 312.770740][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.778117][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.787625][ T8486] device bridge_slave_0 entered promiscuous mode [ 312.801895][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.810382][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.819944][ T8486] device bridge_slave_1 entered promiscuous mode [ 312.868178][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.884263][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.931395][ T8486] team0: Port device team_slave_0 added [ 312.944416][ T8486] team0: Port device team_slave_1 added [ 312.986605][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.994493][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.020801][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.035528][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.044097][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.070226][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.166523][ T8486] device hsr_slave_0 entered promiscuous mode [ 313.219858][ T8486] device hsr_slave_1 entered promiscuous mode [ 313.635251][ T8486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.688416][ T8486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.775788][ T8486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.915750][ T8486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.228623][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.260249][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.270007][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.295655][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.315885][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.326324][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.337448][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.344804][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.364446][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.380450][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.390548][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.400040][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.407400][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.460038][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.471505][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.482546][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.493541][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.503978][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.514814][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.525428][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.535214][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.555802][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.569521][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.583753][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.593634][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.603603][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.648857][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.656584][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.689324][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.739307][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.749909][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.796840][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.806627][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.831224][ T8486] device veth0_vlan entered promiscuous mode [ 314.856602][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.866320][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.885139][ T8486] device veth1_vlan entered promiscuous mode [ 314.942645][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.954453][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.964168][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.974200][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.002295][ T8486] device veth0_macvtap entered promiscuous mode [ 315.025316][ T8486] device veth1_macvtap entered promiscuous mode [ 315.071495][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.079770][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.089461][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.099001][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.109235][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.134074][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.162328][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.172650][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:02:37 executing program 0: 05:02:37 executing program 0: 05:02:38 executing program 0: 05:02:38 executing program 0: 05:02:38 executing program 0: 05:02:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000140)=0x1e) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x75}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 05:02:40 executing program 1: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/184) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x725000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0xffffff80, 0xd7, "8b6d2a01e718a9ee4e30f93306ad40fa79d5980ff180b2545a44396f45da272ef7254651b68c500840ccbf6cd2019b89eb5b7292059053fb559d2725414520d0fd6b6d1b7ffd038be688a1adf3de003c7d7825ad7a0b5d1eeec9ff6f7e502c31459cd247948bbcac5302ce7260cccf2f312a011c9323187c3bc3944330cf3e13820aae6dbed21829e04edf84fc5de26f1fdaae1f0de2b86442e9ee51e2f902d3a9dd0f5811ebbd41b3fd99d7af875419d17a9ae4a8c4052a24429feb15d93d7f26095637487ecc4f94f67ac8023b5d719df9eb008ed031"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x2000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000380)={0x9, 0x2000}) r2 = syz_open_dev$video(&(0x7f00000003c0)='/dev/video#\x00', 0x3ff, 0x200a41) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000400)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000c80)=0x1f) r4 = open(&(0x7f0000000cc0)='./file0\x00', 0x8000, 0x4) bind$l2tp(r4, &(0x7f0000000d00)={0x2, 0x0, @empty, 0x1}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r5 = open(&(0x7f0000000d40)='./file0\x00', 0x22a100, 0x1) r6 = creat(&(0x7f0000000d80)='./file0\x00', 0x40) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/capi/capi20\x00', 0x400100, 0x0) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000e00)={0x1, 0x8, [{r4, 0x0, 0x1000000, 0x2000}, {r1, 0x0, 0x0, 0x4000}, {r6, 0x0, 0xfffffffffffff000, 0x8000}, {r4, 0x0, 0x1000000, 0x8000}, {r7, 0x0, 0x1000000, 0x4000}, {r1, 0x0, 0xfffff000, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000, 0x1000000}, {r4, 0x0, 0x2000, 0x1000000000000}]}) r8 = syz_open_dev$radio(&(0x7f0000000f00)='/dev/radio#\x00', 0x2, 0x2) ioctl(r8, 0x199, &(0x7f0000000f40)="92099a58ea87b02ebf316e1d5e7e67ca5617afe5d133cfaaaee1a970669129d8b7ddbe23bdb52dfd0ba729549871b37a696cbb6207680bc6d7fb0e09ab51609f5ae759dd0ac88fbf6463") openat$urandom(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/urandom\x00', 0x418400, 0x0) [ 317.924123][ T8713] IPVS: ftp: loaded support on port[0] = 21 [ 318.202117][ T8713] chnl_net:caif_netlink_parms(): no params data found [ 318.385427][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.392879][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.402924][ T8713] device bridge_slave_0 entered promiscuous mode [ 318.421797][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.430384][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.439786][ T8713] device bridge_slave_1 entered promiscuous mode [ 318.494193][ T8713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.511088][ T8713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.562382][ T8713] team0: Port device team_slave_0 added [ 318.574358][ T8713] team0: Port device team_slave_1 added [ 318.621071][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.628702][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.654847][ T8713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.675806][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.684087][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.710193][ T8713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.848035][ T8713] device hsr_slave_0 entered promiscuous mode [ 318.949284][ T8713] device hsr_slave_1 entered promiscuous mode [ 318.999002][ T8713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.006640][ T8713] Cannot create hsr debugfs directory 05:02:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000c06010800000000000000000a0000010900020073797a32000000000900020073797a310000000005000100070000ffffff7f0007003200000003090002007379ff0100000000050001000700"/92], 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000001) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000200)=0x60000, 0x4) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) write$binfmt_elf32(r2, &(0x7f0000000840)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="5feb02d19c40e6f57a24b95ead31bc8f92880bab7b3d70938188d9830b7d2494268eb05c267bcccf191c54a979f18dc27984292f67adaa1edbc0d961bf587247afbb5ac65d07f47fd46cc752aa7b4b4b48ce8563fba9700b56646634bc0c367f9a9ed424b7b54c651a0e2e1ce67307515521c4b479385c61384b20b53fd7a4c6b133e82c605dadf54db72644796255106f2ffd1c8fed6143e7013163a83fc8285114f1f8c6aba9aadb658cd84bdd7a108f9252624cf2ad58922b32c2c04c602107feb2f7887054d5f563e9ca2d40db3fb7", @ANYRESDEC=r4, @ANYRES16=r3, @ANYRESDEC=r8, @ANYBLOB="13324048aad6571d4d389a3a1ea64330a488c5cd5096c8ad27df4368f90b44f44e9afdd5955d6b0692f8d2ac655cee3446cceaeed5e1124b9f3ebbb0f6e6801d946a234396ef5e6a4c44878d0aa56bfeb8e9bd9fce7ad5544d13edb7a22f3d986b03580caabc95ea833619022a24797ee8cd5bc511cefb0d2fd737b17f9325d54767c4e2ba1dce6743bf572865ac73474f23ce5e694f1ac0903a255efba1d647f140f79499a41d4c5db1edb3955c5b534fb089aba1939561f1d18a61b4bb9840f6c924d2df82772f291cb764c03a2c0be5dc95af80141f8da3d4c66e06f9ac5458ce694c2340f465edf9b44e87070f87f8a3bda895", @ANYRESDEC=r7, @ANYBLOB="44926740ea699d01126bd2bc60988dfdec866b26a3f006a02c6a7355893857feb849340af560498686b8339c7a93562a11c3f751b938e45c5897c184bc13e827d9b8207311901d"], 0x1) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/67, 0x43}}], 0x700, 0x0, 0x0) [ 319.160787][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.221124][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 05:02:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340100001000050700"/20, @ANYRES32, @ANYBLOB="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"], 0x134}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2a0, 0x0, &(0x7f0000000100), 0x18, &(0x7f0000000100)}], 0x492492492492805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x0, "072875a99d2b44fc0e18ed970e4069854400ebf269cec04226a6bdf448df5029", 0x10, 0x1, 0x2, 0x8, 0x2}) [ 319.490030][ T8924] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 319.499475][ T8924] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.579543][ T8713] netdevsim netdevsim1 netdevsim0: renamed from eth0 05:02:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340100001000050700"/20, @ANYRES32, @ANYBLOB="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"], 0x134}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2a0, 0x0, &(0x7f0000000100), 0x18, &(0x7f0000000100)}], 0x492492492492805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x0, "072875a99d2b44fc0e18ed970e4069854400ebf269cec04226a6bdf448df5029", 0x10, 0x1, 0x2, 0x8, 0x2}) [ 319.646091][ T8713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.710487][ T8713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.803825][ T8941] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 319.812206][ T8941] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.833494][ T8713] netdevsim netdevsim1 netdevsim3: renamed from eth3 05:02:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="e9fffffffeffffff0000000009000100680365dcd4403868778d59b1510000736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc9aa89facf0ca14c}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00'/11, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000002c009eefc794dd270d05000000c90000000700000038fe4c561a477de11494c3d5f08cc067fe3e4450bed22800ac274469c40ef752fa91239f63ace9aae7b4fa9276522bd1128e4ef05f3d3154767ca1acf9aeb99a90a3eadf29479109ef0c5a469c8382e77ee46c2355482165dfa4f1feebee390a1f91a8fbc46c5c259503798307f9d5a82d0242b43670da1fcb733c033c2d81ffb0d7c93b6a671b308241561d6d5284db10704e98", @ANYRES32=r6, @ANYBLOB="0f00000000000000f1ff08000b000100666c6f776572000004000200"], 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000007c0)={0x350, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0xffffffffffffffec}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x400, 0x9, 0x4, 0x10001}, {0x7423, 0x2f, 0xe4, 0xff}, {0x0, 0x0, 0x1, 0x5}, {0x3, 0x20, 0x80, 0x7fff}, {0x8000, 0x6, 0x46, 0x6}, {0xe00, 0x80, 0xf9, 0x81}, {0x3d, 0x8, 0x4, 0x800}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xe031}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x4040}, 0x800) [ 320.212888][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.253837][ T8713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.291079][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.300491][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.310472][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.364531][ T8713] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.384611][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.395116][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.405841][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.413188][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.434191][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.451159][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.460986][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.471074][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.478407][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state 05:02:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r6, 0x80085617, &(0x7f00000002c0)) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000000c0), 0x4) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000180)=""/233) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002980810120000000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f0000000280)=0x3ff) [ 320.563148][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.574634][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.585666][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.596708][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.607213][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.617844][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.643474][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.663665][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.674022][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.700469][ T8713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.714073][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.730778][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.741058][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.831446][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.840925][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:02:43 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f000000e940)=[{{0x0, 0x0, &(0x7f000000a600)=[{&(0x7f0000008440)="bbe1f1e0611caaf750a79500526a64a8497bd0278d40a6dc6d932b889288182573654eb8045a49f6b0a7c855b69681a287cd8f0936ad26dc37e12d3fbe5cc126c2321aff9f1f4c126156cce8997ceaa9bca2a7e90a9fa075e67048e6d20bdc112400172f2ccb349019d572d318e8bb99b2f9981627bf183ce13b6e321016edae8871763b7fabffa5e0ca4f7b957b00f4dac99c2977ad63b2197e4d54baee3eda0761bc359984c923b023a471f0520bc053854bab656cc2cdf588aa992c63081b058539765f0e6abb212ea218550f3a997cb15448c95ce7c37e7b5edc4765c641bb6391b1dd73b5c1dd20157d96bad531beafaffa87f7f949c4cc6031a13d67bf797c4be939713f4c5e515577583496211db6a84447d7e8f058913eb6fa020e7106f518e839d9832b61adc1d9dc0100162ce17d9749090b322a7a62bbe2ce84ae393796dd17f7419a813978d3a5a1073adcbca4df307cb645096debbd98178691a61b8d78ec83898be2fa843952b8a38a42fff41d67c87ea6e3e67cad8af6da647a12f38a6a34d009926a422058e5e7afdcb1e87a052c353bba7127c391cc6eec5d324dbed552f25f8115a29f0337ff6df553b2658edcb10c2987a4d1ce6a12d507622f99650d63c97bc0d7a537ce35a3cae2ee4780ff74f6b84bee84d5d8bcb1e2837a00e3aca6beb55fc2df60a81bdf1a2dd3c6a3fbd20bddad33ce43b26337dbd045a1d0c671e6bfcb1d65cbc7bca39e24e461a4801e38d351cdcabfb40efb379fc6cf969a292c07806d5c9d5f6930268e25c2b69c1fd88a6fa654fa3449c1e369ffe25573083929f82245465b76c594ea6ee8571b0759941c5f92ebbbb9c31ccd9c05fcdb7407ec9e6d3d28fdc0cf0d77421ab8925ff61f0d8217c26add17f091b7f977b1bf2f4eac3c33440b986131091c2938911008ebc0aa017d190ca9e2f6b18799523f96928759c03f7b752b8e041c585d75c7d9cfc9fb75abe048236d0d82de30c26ccbe19b5bbdba8903c4cea07957597d494405eaf2e8bb247dbe15411e6ef37fa554c107c683ffd6cd967a7fadf2ad475ebf3c02b37ccd9e832340d7636d4b6d1e832f811f23204e72b7bd267caa0e9393676e69644ac8d4e2c129d89a44700f3b3f66766a22d9f94e8aac8ce8902b7e5ea8a7655cb4c264a12593b84003356c5dfdf9a0ec3d0fd0660770926387d94ebdcc068a29c483ad1af042dfd4a759976865aaea93b7c782ddd679c412e3dce4cbcc992a556740376ec6c5255f7cf43cbec0a4e0e75e18c28009f86e28010283e3e9a9b1681e02c8bad299c7e73320792b914263934fa28454e86686d5e104509749037d45f1d8c60d1c461c7c08dbe700a9d354034d2e4f6b8b23622aeaa7af6950b15e49e5b394ee7ed7c12be48b2a86dcaf480a4acea3d4596ffdbb249b28bb60c5e8ca58506ec22ac9c83d8244a0a7dfd5dfa2b7b3cd0b7976f33df149fc79470ad453ed8d33247a19ecbfe1b8725d0f27460e9c19fd78ada4181f1a44e406f38a55fa40fb96aa300e278ccc3cd23c13086a44bc5ddd43bc52677ee4fe08783bab2c6f2fef720741d7b634344d4b357c9724eff58b3f51b8152741792777d03bb778b4536cd57e14764093a97e0611d24d0687f2c7a9679555eae71618141548304a34e29361846373f8507e740bbc0de1ccf6ae79798d4fbc07b03f4f28d3c0ada1f67e0b5c4870b6038cd1bc785784e771bb6dee98951a938936359b3bde1fb7556cc6b80b665b1cdb5ca19b66deb7fdee928df04cf61f88f4eb63759b32719c59498864da4db65020855476dabf4ee71ea90ad4c599502ee5209bf80c7977a9d0554e97fcf17986f9d16db3b6c85be365910d7791f7f31a9243185f01b662fa1a2fcac196bb8deec286129ae939c7fb51d8f916c82d25b0bb1a3a149a917915bbe6125be0008494b6d4c9511d8ba7bdca4f907e612ac468546143c7e1b2a4e6fc6eb7ca6e017b90af6bb28863b737b1229a8e4cbb602aa15ed0bf27dcafb938a9ba495769cefb4d96ee1d8276120ee91c8743b2fa69f5f6d77f2acd32d7c3970b907a5c9369d02f91ae09d7b88d7dab4159bd01e833c235c8e768b68844f0af3dd9fba45d5f5b3ff3052b7259fc82009eb4848838155ec945dc5e257f508768660c9455ab1e8fe76f280cdda12d74d52fa9ec0cb8c3b33d25028aa40e23c3cb2c1081d0e1e1e06caaedfc82f8b54dccad1e839d028714dbb0e4791c1d077aba2c4b44a2650fcfb54576cf42e5de66aa0465fd6d95f02b8ba9e7213b564afeb0c6aa2867d8f2f6eded3e5edabb7a6759b7739ae067597777d1a71ec6cb65967b10b8ddc3a3db43b1283519b524f1daebf59888b5421ba693afcaaf978e57428cac629624f7ec6e522d2b0c9164f0b7237c6617279a252162cc7aed25fab1bd3b584c76b6b93c41ab2b0bcd7502ae6fe787001cb9ae4c7ff7700ad681a7f445f56094c5937ffda902c971656fc75b92f6362fa1a50cf3b44627091e3f87a12ccd358048e60d9c89561ac3516ae18d31535f14850de3fadb9797af7734b162db16cbaeb54854297ab6c9f7be02fc920b35879aff1a66fc7469a3df893860186ca33873d68f035ea4ef375280dffad405684cb93b91998597c4a0a9ec6a75577ac0f48dc9d8ba4c404b11fe5dfcfaa4321d5ad07eee002921db0e88366a54322337ae050a96d1e1df71483f5bd48e2748fc0d1e2f6fba96f6d6f541941b6c87ebf51abf591e71d00a6919c26499d056529364a5785f521c9c2a6c683fa723de05730a8fc2f8281ebad73795cc0ab1a26e888be8cbd8e17ea4950d6ed3ae28a6956c563ecb8bbb29dc2e6323923a38dea66790eee181f3a99e08d38999421f81933cb180870b7407414b34458c9552958b49547933424f029360d544908341a5253de4d9711977b3296c45a18630c22e0e1c6f89af9d7c175f429e32ad4747ec42480f823e5c79c13b676fce51e234e3180b57bdfb0fa46127e9cc9677ff2f823c6b74e10fe7b0286d07ecac878e97ea2da96ae199829c6e89664d9ba36c20be705f2ddba05fd0e195cbc90b0a2f20a2ffd05632a30d1ee5bc8f55c25c78dc08e1744751c1957e8a4b3b4dc4847af9d232f05a182def0f9d5bb4503bfdbae3cf07183d8d0d5051480a8968cb42fa218b37bde6a46f2a51a0968b7f555b976f471d7f4068ab6eb42430ccca2724f8a003918a05dff40da661bc8cf812bb21917a6b52c92713d86d62fccc33e01bfd32d6a50fa2c9a82130956a0dc5216b864710d1e496cb2fec7e90aebf6ca3b99232b18dac3d00931f65f6ab9a761c222e2407246eb1351c2e9a251928b403a175a2d9e37878b0274b4f2d0763718e0ed98461b04e8c9fa308ac2db842ac1d00598d61d59c80faeff2e18bbf04b764e038f17200f8581f29eeac1624535d0c9da0ff2bf3f7f92cf5075b454a39ab52436b478d4537432cc1a66bc2d5f4e1d5a1574ce1702e2e83e35a1b164eebe5392ff9d27493277d24f1e73b4fe96db3ad37f85f15ec61e9bc7c0e7a722418129f36972d45c3e6c3f13b400b3012dfcada29eabeb8432a9e70d76604aafb250d5f43907f8bf8ac4a5efd66deb1cad64f5dab8c77e30ed0f7428665f4098c693472883fdb374aaf9e65c1d140eb6da1a2912c1c28b5985ccd61a4116b2225bb2e3f51e139c71de4eb088b4e4942250ebd09565a0dca6eb55d92b60fd8392eedb14e46c0f7351595f9ffbc9c5290793ba8fd23616f0faa05c7bfe1f30b3f8e8e863da142feb29eba75f21467a50af805a63e94a366ff8f708207bda6050b59c3850b53e58d4174027938896ec897acb908fd35774e60999cf43f3b660893aba18a59d5d1d9894de5103d6a9383881e3b986cc8c6e3ff1efd0817a68d55c5b53708571a57b6cf741a3c8a1b4cef103eee231dce57392c15191966fe5926c8c067a1275306f2a02c8b7c600656f150e648e991d93d62b27c52c4774e0d033a651a114c188e5b7efc4c5d0493d8aefe92f535776da9ca13f530530d8f1271d676edf6fe299c644635d9c479d059359beff0e35237f2e5cb5222c3df1632af06ce1d20792ae7d5781c38dc706a2372d40562cecd4b78979c44b85ea121ec32bd9d3e5d13846a7140f340d1f7ac6084b9fefa313fcfd3f38c5edcba0811795e51a46f22c86cb8aa8b6d40a59e3558cc1f340dc62681f5be70baedb3a183d99ccffa1e4817d7b9d8ffae253c9848e794c0d5", 0xbc0}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000080)="9c22664176729dcff8d2039838830bb485f3bfae987920a968eeaa88802e5ac89c7e93d5d5a1024dbd3d6efcfd48198ece257889d7083274818dbdee4c420d7ae2d4a003e830cf5eef7a7ea778176fe571a8db71d3e1e586fbe7014cf877885ed17ea31a98e6e8dcf7a57edf2a2aa923af01", &(0x7f00000007c0)=""/4096, &(0x7f0000000180)="29adb36092e43d71502c868425d365b074ce0eac21b94ee8610c29e040919c553267b62dd5c984ee1b8e333c5f30d5831eaec1416ef97419f6c42921da2422187162508fb81cc879047ac06c5045aaa0e2e8f504fe1c34bdff3bb4f6181ae44c0e3224fd9020f8ee96d5e9ccb809b66da0bcc427e3ee771ad945d9a4f50771eb2e00ba708daaeae1f0e5eebfcc6d2600074bae3b7e126d81ca0039dc2e29aec4ce30899833eef6775789dd80aa5a6b159851d7c25e20a60a9cc6d7e36f55d7eddf7f8d3a286e0c849b9665820c4f2772ac9b18af9a3b789c787ce4d66c71b6935bdf52a26ab0cd02bb9deeee4a4a6ab64b97053d35b6", &(0x7f00000017c0)="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", 0xfffff92c, r4, 0x4}, 0x38) sendfile(r2, r0, 0x0, 0x80000002) [ 320.873824][ T8713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.953271][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.963315][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.034659][ T8968] ===================================================== [ 321.041675][ T8968] BUG: KMSAN: uninit-value in nfnetlink_rcv+0x2f5/0x3ad0 [ 321.048710][ T8968] CPU: 1 PID: 8968 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 321.057296][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.067356][ T8968] Call Trace: [ 321.070700][ T8968] dump_stack+0x1df/0x240 [ 321.075070][ T8968] kmsan_report+0xf7/0x1e0 [ 321.079540][ T8968] __msan_warning+0x58/0xa0 [ 321.084180][ T8968] nfnetlink_rcv+0x2f5/0x3ad0 [ 321.088892][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.094113][ T8968] ? local_bh_enable+0x36/0x40 [ 321.098898][ T8968] ? __dev_queue_xmit+0x338e/0x3b20 [ 321.104115][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.109355][ T8968] ? skb_clone+0x404/0x5d0 [ 321.113790][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.119020][ T8968] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 321.124854][ T8968] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 321.130945][ T8968] ? netlink_deliver_tap+0xdab/0xe90 [ 321.136263][ T8968] ? kmsan_set_origin_checked+0x95/0xf0 [ 321.140658][ T8713] device veth0_vlan entered promiscuous mode [ 321.141829][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.141858][ T8968] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 321.141887][ T8968] netlink_unicast+0xf9e/0x1100 [ 321.141948][ T8968] ? nfnetlink_net_exit_batch+0x280/0x280 [ 321.169537][ T8968] netlink_sendmsg+0x1246/0x14d0 [ 321.174529][ T8968] ? netlink_getsockopt+0x1440/0x1440 [ 321.179917][ T8968] kernel_sendmsg+0x433/0x440 [ 321.184626][ T8968] sock_no_sendpage+0x235/0x300 [ 321.189544][ T8968] ? sock_no_mmap+0x30/0x30 [ 321.194061][ T8968] sock_sendpage+0x1e1/0x2c0 [ 321.198681][ T8968] pipe_to_sendpage+0x38c/0x4c0 [ 321.203566][ T8968] ? sock_fasync+0x250/0x250 [ 321.208196][ T8968] __splice_from_pipe+0x565/0xf00 [ 321.213246][ T8968] ? generic_splice_sendpage+0x2d0/0x2d0 [ 321.215457][ T8713] device veth1_vlan entered promiscuous mode [ 321.218921][ T8968] generic_splice_sendpage+0x1d5/0x2d0 [ 321.218960][ T8968] ? iter_file_splice_write+0x1800/0x1800 [ 321.219008][ T8968] direct_splice_actor+0x1fd/0x580 [ 321.241250][ T8968] ? kmsan_get_metadata+0x4f/0x180 [ 321.246396][ T8968] splice_direct_to_actor+0x6b2/0xf50 [ 321.251790][ T8968] ? do_splice_direct+0x580/0x580 [ 321.256867][ T8968] do_splice_direct+0x342/0x580 [ 321.261781][ T8968] do_sendfile+0x101b/0x1d40 [ 321.266453][ T8968] __se_sys_sendfile64+0x2bb/0x360 [ 321.271603][ T8968] ? kmsan_get_metadata+0x4f/0x180 [ 321.276744][ T8968] __x64_sys_sendfile64+0x56/0x70 [ 321.281792][ T8968] do_syscall_64+0xb0/0x150 [ 321.286754][ T8968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.292651][ T8968] RIP: 0033:0x45c1f9 [ 321.296577][ T8968] Code: Bad RIP value. [ 321.300645][ T8968] RSP: 002b:00007ff8c4446c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 321.309071][ T8968] RAX: ffffffffffffffda RBX: 00000000000260c0 RCX: 000000000045c1f9 [ 321.317053][ T8968] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 321.325036][ T8968] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 321.333020][ T8968] R10: 0000000080000002 R11: 0000000000000246 R12: 000000000078bf0c [ 321.341003][ T8968] R13: 0000000000c9fb6f R14: 00007ff8c44479c0 R15: 000000000078bf0c [ 321.349041][ T8968] [ 321.351371][ T8968] Uninit was stored to memory at: [ 321.356412][ T8968] kmsan_internal_chain_origin+0xad/0x130 [ 321.362152][ T8968] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 321.368145][ T8968] kmsan_memcpy_metadata+0xb/0x10 [ 321.373181][ T8968] __msan_memcpy+0x43/0x50 [ 321.377643][ T8968] _copy_from_iter_full+0xbfe/0x13b0 [ 321.382945][ T8968] netlink_sendmsg+0xfaa/0x14d0 [ 321.387811][ T8968] kernel_sendmsg+0x433/0x440 [ 321.392506][ T8968] sock_no_sendpage+0x235/0x300 [ 321.397371][ T8968] sock_sendpage+0x1e1/0x2c0 [ 321.401978][ T8968] pipe_to_sendpage+0x38c/0x4c0 [ 321.406843][ T8968] __splice_from_pipe+0x565/0xf00 [ 321.409246][ T8713] device veth0_macvtap entered promiscuous mode [ 321.411915][ T8968] generic_splice_sendpage+0x1d5/0x2d0 [ 321.423598][ T8968] direct_splice_actor+0x1fd/0x580 [ 321.428750][ T8968] splice_direct_to_actor+0x6b2/0xf50 [ 321.434136][ T8968] do_splice_direct+0x342/0x580 [ 321.438998][ T8968] do_sendfile+0x101b/0x1d40 [ 321.443602][ T8968] __se_sys_sendfile64+0x2bb/0x360 [ 321.448724][ T8968] __x64_sys_sendfile64+0x56/0x70 [ 321.453766][ T8968] do_syscall_64+0xb0/0x150 [ 321.458283][ T8968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.464183][ T8968] [ 321.466516][ T8968] Uninit was created at: [ 321.470771][ T8968] kmsan_save_stack_with_flags+0x3c/0x90 [ 321.476416][ T8968] kmsan_alloc_page+0xb9/0x180 [ 321.478062][ T8713] device veth1_macvtap entered promiscuous mode [ 321.481187][ T8968] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 321.481236][ T8968] alloc_pages_current+0x672/0x990 [ 321.498207][ T8968] push_pipe+0x605/0xb70 [ 321.502490][ T8968] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 321.508223][ T8968] do_splice_to+0x4fc/0x14f0 [ 321.512825][ T8968] splice_direct_to_actor+0x45c/0xf50 [ 321.518220][ T8968] do_splice_direct+0x342/0x580 [ 321.523081][ T8968] do_sendfile+0x101b/0x1d40 [ 321.527707][ T8968] __se_sys_sendfile64+0x2bb/0x360 [ 321.532832][ T8968] __x64_sys_sendfile64+0x56/0x70 [ 321.537880][ T8968] do_syscall_64+0xb0/0x150 [ 321.542405][ T8968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.548317][ T8968] ===================================================== [ 321.555268][ T8968] Disabling lock debugging due to kernel taint [ 321.561429][ T8968] Kernel panic - not syncing: panic_on_warn set ... [ 321.568055][ T8968] CPU: 1 PID: 8968 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 321.578039][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.588106][ T8968] Call Trace: [ 321.591439][ T8968] dump_stack+0x1df/0x240 [ 321.592521][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 321.595811][ T8968] panic+0x3d5/0xc3e [ 321.606350][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.610151][ T8968] kmsan_report+0x1df/0x1e0 [ 321.610178][ T8968] __msan_warning+0x58/0xa0 [ 321.610207][ T8968] nfnetlink_rcv+0x2f5/0x3ad0 [ 321.610227][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.610255][ T8968] ? local_bh_enable+0x36/0x40 [ 321.610276][ T8968] ? __dev_queue_xmit+0x338e/0x3b20 [ 321.610297][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.610346][ T8968] ? skb_clone+0x404/0x5d0 [ 321.623971][ T8713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.624698][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.670957][ T8968] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 321.676785][ T8968] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 321.682871][ T8968] ? netlink_deliver_tap+0xdab/0xe90 [ 321.688190][ T8968] ? kmsan_set_origin_checked+0x95/0xf0 [ 321.693752][ T8968] ? kmsan_get_metadata+0x11d/0x180 [ 321.698972][ T8968] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 321.704802][ T8968] netlink_unicast+0xf9e/0x1100 [ 321.709680][ T8968] ? nfnetlink_net_exit_batch+0x280/0x280 [ 321.715424][ T8968] netlink_sendmsg+0x1246/0x14d0 [ 321.720410][ T8968] ? netlink_getsockopt+0x1440/0x1440 [ 321.725815][ T8968] kernel_sendmsg+0x433/0x440 [ 321.730524][ T8968] sock_no_sendpage+0x235/0x300 [ 321.735413][ T8968] ? sock_no_mmap+0x30/0x30 [ 321.739941][ T8968] sock_sendpage+0x1e1/0x2c0 [ 321.744568][ T8968] pipe_to_sendpage+0x38c/0x4c0 [ 321.749434][ T8968] ? sock_fasync+0x250/0x250 [ 321.754062][ T8968] __splice_from_pipe+0x565/0xf00 [ 321.759109][ T8968] ? generic_splice_sendpage+0x2d0/0x2d0 [ 321.764798][ T8968] generic_splice_sendpage+0x1d5/0x2d0 [ 321.770298][ T8968] ? iter_file_splice_write+0x1800/0x1800 [ 321.776034][ T8968] direct_splice_actor+0x1fd/0x580 [ 321.781170][ T8968] ? kmsan_get_metadata+0x4f/0x180 [ 321.786298][ T8968] splice_direct_to_actor+0x6b2/0xf50 [ 321.791708][ T8968] ? do_splice_direct+0x580/0x580 [ 321.796783][ T8968] do_splice_direct+0x342/0x580 [ 321.801675][ T8968] do_sendfile+0x101b/0x1d40 [ 321.806314][ T8968] __se_sys_sendfile64+0x2bb/0x360 [ 321.811437][ T8968] ? kmsan_get_metadata+0x4f/0x180 [ 321.816587][ T8968] __x64_sys_sendfile64+0x56/0x70 [ 321.821630][ T8968] do_syscall_64+0xb0/0x150 [ 321.826150][ T8968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.832053][ T8968] RIP: 0033:0x45c1f9 [ 321.835960][ T8968] Code: Bad RIP value. [ 321.840029][ T8968] RSP: 002b:00007ff8c4446c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 321.848447][ T8968] RAX: ffffffffffffffda RBX: 00000000000260c0 RCX: 000000000045c1f9 [ 321.856446][ T8968] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 321.864431][ T8968] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 321.872416][ T8968] R10: 0000000080000002 R11: 0000000000000246 R12: 000000000078bf0c [ 321.880404][ T8968] R13: 0000000000c9fb6f R14: 00007ff8c44479c0 R15: 000000000078bf0c [ 321.889583][ T8968] Kernel Offset: 0x1f800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 321.901211][ T8968] Rebooting in 86400 seconds..