Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. 2020/10/01 02:51:48 fuzzer started 2020/10/01 02:51:48 dialing manager at 10.128.0.105:46167 2020/10/01 02:51:49 syscalls: 3234 2020/10/01 02:51:49 code coverage: enabled 2020/10/01 02:51:49 comparison tracing: enabled 2020/10/01 02:51:49 extra coverage: extra coverage is not supported by the kernel 2020/10/01 02:51:49 setuid sandbox: enabled 2020/10/01 02:51:49 namespace sandbox: enabled 2020/10/01 02:51:49 Android sandbox: enabled 2020/10/01 02:51:49 fault injection: enabled 2020/10/01 02:51:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/01 02:51:49 net packet injection: enabled 2020/10/01 02:51:49 net device setup: enabled 2020/10/01 02:51:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/01 02:51:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/01 02:51:49 USB emulation: /dev/raw-gadget does not exist 2020/10/01 02:51:49 hci packet injection: enabled 2020/10/01 02:51:49 wifi device emulation: enabled 02:54:57 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x2, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) syzkaller login: [ 229.285180] audit: type=1400 audit(1601520897.231:8): avc: denied { execmem } for pid=6504 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:54:57 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 02:54:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f0000000080)=0xc) 02:54:57 executing program 3: timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="160000006f000001"], 0x16) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x1ff}}, 0x43) close(r1) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = gettid() tkill(r2, 0x1000000000016) 02:54:57 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$inet(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, 0x0, 0x0) 02:54:58 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x31d8c1, 0x1a0) [ 230.512028] IPVS: ftp: loaded support on port[0] = 21 [ 230.667827] IPVS: ftp: loaded support on port[0] = 21 [ 230.668172] chnl_net:caif_netlink_parms(): no params data found [ 230.869233] chnl_net:caif_netlink_parms(): no params data found [ 230.917456] IPVS: ftp: loaded support on port[0] = 21 [ 230.973457] IPVS: ftp: loaded support on port[0] = 21 [ 231.005622] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.013061] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.022213] device bridge_slave_0 entered promiscuous mode [ 231.030537] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.037290] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.047476] device bridge_slave_1 entered promiscuous mode [ 231.089048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.122589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.162797] IPVS: ftp: loaded support on port[0] = 21 [ 231.178168] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.198272] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.207915] device bridge_slave_0 entered promiscuous mode [ 231.220029] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.226755] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.233772] device bridge_slave_1 entered promiscuous mode [ 231.327097] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.336591] team0: Port device team_slave_0 added [ 231.362334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.370561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.378514] team0: Port device team_slave_1 added [ 231.399554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.456996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.457046] IPVS: ftp: loaded support on port[0] = 21 [ 231.463267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.494676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.507327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.513589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.539165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.550542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.561688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.572876] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.580912] team0: Port device team_slave_0 added [ 231.586977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.595343] team0: Port device team_slave_1 added [ 231.621518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.628109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.653451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.690087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.696383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.721804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.747927] device hsr_slave_0 entered promiscuous mode [ 231.753720] device hsr_slave_1 entered promiscuous mode [ 231.783717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.797011] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 231.804223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.840572] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 231.877434] device hsr_slave_0 entered promiscuous mode [ 231.884192] device hsr_slave_1 entered promiscuous mode [ 231.906301] chnl_net:caif_netlink_parms(): no params data found [ 231.916555] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 231.959228] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 232.099061] chnl_net:caif_netlink_parms(): no params data found [ 232.230226] chnl_net:caif_netlink_parms(): no params data found [ 232.355953] chnl_net:caif_netlink_parms(): no params data found [ 232.413070] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.420359] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.428172] device bridge_slave_0 entered promiscuous mode [ 232.435842] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.442218] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.450148] device bridge_slave_1 entered promiscuous mode [ 232.477093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.503452] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.521737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.529980] Bluetooth: hci0: command 0x0409 tx timeout [ 232.587198] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.595688] team0: Port device team_slave_0 added [ 232.602158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.610563] team0: Port device team_slave_1 added [ 232.638671] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.646552] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.654004] device bridge_slave_0 entered promiscuous mode [ 232.670638] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.677156] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.684150] device bridge_slave_1 entered promiscuous mode [ 232.684723] Bluetooth: hci1: command 0x0409 tx timeout [ 232.715005] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.733513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.740832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.766259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.782892] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.790635] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.798403] device bridge_slave_0 entered promiscuous mode [ 232.810494] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.817721] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.826294] device bridge_slave_1 entered promiscuous mode [ 232.844427] Bluetooth: hci2: command 0x0409 tx timeout [ 232.851920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.858658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.884864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.897630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.908831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.923120] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.939853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.948328] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 232.973584] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.981391] team0: Port device team_slave_0 added [ 233.002569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.004526] Bluetooth: hci3: command 0x0409 tx timeout [ 233.030136] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.037904] team0: Port device team_slave_1 added [ 233.053324] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.061609] team0: Port device team_slave_0 added [ 233.082116] device hsr_slave_0 entered promiscuous mode [ 233.088295] device hsr_slave_1 entered promiscuous mode [ 233.113872] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.120748] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.130230] device bridge_slave_0 entered promiscuous mode [ 233.138243] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.146844] team0: Port device team_slave_1 added [ 233.164791] Bluetooth: hci4: command 0x0409 tx timeout [ 233.179315] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 233.187088] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 233.202761] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.209319] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.218422] device bridge_slave_1 entered promiscuous mode [ 233.234234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.240627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.266927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.279677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.286159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.311667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.325143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.331921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.334767] Bluetooth: hci5: command 0x0409 tx timeout [ 233.358281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.374601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.382291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.407450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.413724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.440762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.457570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.476850] device hsr_slave_0 entered promiscuous mode [ 233.482516] device hsr_slave_1 entered promiscuous mode [ 233.490783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.506189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.521702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.538213] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 233.547207] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.592820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 233.609702] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.618600] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.627505] team0: Port device team_slave_0 added [ 233.634258] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.643532] team0: Port device team_slave_1 added [ 233.657033] device hsr_slave_0 entered promiscuous mode [ 233.663262] device hsr_slave_1 entered promiscuous mode [ 233.708849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 233.716993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.723379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 233.748595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.755334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.780961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.800201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.808169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.819685] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 233.826799] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.838312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.847087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.873136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.888721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.896724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.908388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.930941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.939331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.948691] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.955217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.993387] device hsr_slave_0 entered promiscuous mode [ 234.000987] device hsr_slave_1 entered promiscuous mode [ 234.016537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.027219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.038931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.047684] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 234.086287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.095498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.103175] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.109609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.117281] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 234.133701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.148673] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.164559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.177133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.215824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.240007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.248654] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.287396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.295523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.303028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.310532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.318254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.335175] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 234.341303] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.358626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.369720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.387766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.396449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.412935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 234.426555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.440153] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.452962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.462694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.470927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.479219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.487832] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.494170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.505528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 234.518781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.549753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.557041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.565681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.573219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.581599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.589618] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.596031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.608071] Bluetooth: hci0: command 0x041b tx timeout [ 234.614523] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 234.620527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.647835] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.656469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.664153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.678846] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 234.689525] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 234.702737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.709978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.719354] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.728984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.743273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.766803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.768051] Bluetooth: hci1: command 0x041b tx timeout [ 234.775678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.787886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.798521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.819012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.837418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.846483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.862925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.883096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.895980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.910835] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.918763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 234.925859] Bluetooth: hci2: command 0x041b tx timeout [ 234.934995] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.945337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 234.958536] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 234.970044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.979176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.987655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.996484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.008131] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.020974] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 235.028142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.038420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.047365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.061682] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 235.068789] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.081516] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.092002] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 235.098573] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.105852] Bluetooth: hci3: command 0x041b tx timeout [ 235.119843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.128491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.137215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.144054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.152798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.160890] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.167317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.176773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.186429] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 235.197871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.228043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.235935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.243949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.254231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.262452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.270484] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.276921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.283973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.292668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.300467] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.306875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.314116] Bluetooth: hci4: command 0x041b tx timeout [ 235.322411] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 235.335701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.343892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.357482] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 235.365144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.372401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.380747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.388930] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.395359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.402962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.410738] Bluetooth: hci5: command 0x041b tx timeout [ 235.413072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.423115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.433914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.444999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.454114] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.464554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.478972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.486014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.495360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.502411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.517304] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 235.524897] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 235.531465] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 235.540716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.549883] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 235.556284] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.569529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.579968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.587706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.596962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.605255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.612968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.621289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.632521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.650375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.660962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.671113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.682116] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 235.690110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.698589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.707138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.715714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.723512] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.729932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.737666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.745291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.753296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.760644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.768450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.778689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.791271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.800255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.810001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 235.822852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.830834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.838861] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.845273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.852170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.859898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.867724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.875577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.883082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.892838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.907285] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 235.913357] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.925291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.934163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.942670] device veth0_vlan entered promiscuous mode [ 235.950900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.958724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.967401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.975616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.987229] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 236.000034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.010872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 236.023052] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 236.034924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.045761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.053427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.063353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.071420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.082787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.094087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 236.102972] device veth1_vlan entered promiscuous mode [ 236.111587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.120032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.131405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.140289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.148767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.157520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.166379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.173924] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.180372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.187998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.195362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.205899] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 236.211927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.223704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 236.236144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 236.245603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.257995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 236.265391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.279157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.290810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.298845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.306841] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.313644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.320913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.328994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.336821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.344421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.367279] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 236.373314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.389982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 236.402589] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 236.411770] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 236.419624] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 236.430113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.453530] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 236.467503] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 236.473875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.485564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.492977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.505121] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 236.511148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.520813] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 236.530295] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 236.539341] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 236.548938] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 236.557712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.568215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.576065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.582757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.592714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.599593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.619607] device veth0_vlan entered promiscuous mode [ 236.626919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.643300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.650344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.657986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.669160] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 236.682342] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 236.689687] Bluetooth: hci0: command 0x040f tx timeout [ 236.698604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.709220] device veth1_vlan entered promiscuous mode [ 236.715923] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 236.728299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.738979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.747658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.755797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.763504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.772497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.780953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.790138] device veth0_macvtap entered promiscuous mode [ 236.798282] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 236.808352] device veth1_macvtap entered promiscuous mode [ 236.818014] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 236.825520] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 236.840670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.847993] Bluetooth: hci1: command 0x040f tx timeout [ 236.853481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.861183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.868769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.876057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.882744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.889527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.897472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.911871] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 236.924200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 236.945595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 236.956264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 236.970967] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 236.983728] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 236.996475] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 237.003705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.010768] Bluetooth: hci2: command 0x040f tx timeout [ 237.017544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.026988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.035084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.042501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.051299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.059310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.067348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.076526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 237.085917] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 237.092957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.101344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.113283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.126294] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 237.133160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.147503] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 237.153555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.165236] Bluetooth: hci3: command 0x040f tx timeout [ 237.173976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.185117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.202598] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 237.211667] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 237.238434] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 237.256026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.270174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.278573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.286666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.298299] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 237.312243] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 237.327888] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 237.341546] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 237.350928] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 237.400662] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 237.407992] Bluetooth: hci4: command 0x040f tx timeout [ 237.413574] device veth0_macvtap entered promiscuous mode [ 237.422479] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 237.448029] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 237.462185] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 237.472625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.481868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.485955] Bluetooth: hci5: command 0x040f tx timeout [ 237.492356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.502935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.510889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.518668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.525511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.533034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.541028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.550321] device veth1_macvtap entered promiscuous mode [ 237.558353] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 237.572461] device veth0_vlan entered promiscuous mode [ 237.582670] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 237.591940] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 237.602261] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 237.619654] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 237.632307] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 237.641804] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 237.651902] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 237.663384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.671427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 237.679218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.687498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.695652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.703065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.711380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.721746] device veth0_vlan entered promiscuous mode [ 237.731189] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 237.746896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 237.767875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.775940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.783501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.792975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.820405] device veth1_vlan entered promiscuous mode [ 237.828538] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 237.837976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 237.848924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.859727] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 237.867208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.873835] device veth0_vlan entered promiscuous mode [ 237.891387] device veth1_vlan entered promiscuous mode [ 237.897851] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 237.906487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.913882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.923224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.931521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.941793] device veth1_vlan entered promiscuous mode [ 237.954004] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 237.963564] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 237.978130] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 237.988940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 237.999143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.009428] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 238.016462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.028253] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 238.039752] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 238.050493] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 238.062307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.070469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.079227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.087359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.094953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.102678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.110862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.119148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.142008] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 238.152955] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 238.172439] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 238.189665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.201629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.215715] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 238.224777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.232645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.250755] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 238.263400] device veth0_macvtap entered promiscuous mode [ 238.271596] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 238.299016] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 238.338335] device veth0_macvtap entered promiscuous mode [ 238.351484] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 238.386050] device veth1_macvtap entered promiscuous mode [ 238.397012] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 238.403471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.411194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.419016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.426698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.435535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.445802] device veth0_macvtap entered promiscuous mode [ 238.452408] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 238.465957] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 238.472965] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 238.481373] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 238.493403] device veth1_macvtap entered promiscuous mode [ 238.501066] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 238.516093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 238.540624] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 238.550221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 238.562187] device veth1_macvtap entered promiscuous mode [ 238.569781] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 238.579609] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 238.588634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 238.603663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.611477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 238.627777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.634612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.637685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.653494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.663922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.672478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.681515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.690040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.697649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.729408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.739654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.749397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.759572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.769774] Bluetooth: hci0: command 0x0419 tx timeout [ 238.776835] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 238.783747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.792955] device veth0_vlan entered promiscuous mode [ 238.799783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.814573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.823686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.833487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.842709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.854083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.865342] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 238.872276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.881974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 238.897050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.908022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.916341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.924072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.935607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.944491] Bluetooth: hci1: command 0x0419 tx timeout [ 238.946405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.960216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.970270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.980569] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 238.987701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.002411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.013683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.025038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.035604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.045662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.056175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.068831] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 239.077152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.085127] Bluetooth: hci2: command 0x0419 tx timeout [ 239.091404] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 239.100839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 239.110089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.118980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.127151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.138171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.175275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 239.186570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.193707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.213820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.223252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 239.233319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.242896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 239.253914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.254621] Bluetooth: hci3: command 0x0419 tx timeout [ 239.263118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 239.278094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.288334] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 239.295884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.319869] device veth1_vlan entered promiscuous mode [ 239.335802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.343036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.356497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.368600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.383260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.394426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.411381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.420948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.430764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.439932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.449754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.460318] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 239.468676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.484780] Bluetooth: hci4: command 0x0419 tx timeout 02:55:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1c, @empty=[0x14]}]}, 0x3c}}, 0x0) [ 239.537030] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 239.565256] Bluetooth: hci5: command 0x0419 tx timeout [ 239.579789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.589366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.610386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.613322] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 239.631360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.656158] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 239.683391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.699033] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready 02:55:07 executing program 0: unshare(0x4060600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @private2}, 0x80) [ 239.719242] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 239.745867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.753772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.786781] device veth0_macvtap entered promiscuous mode [ 239.793329] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 239.799886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.808762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.830400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 02:55:07 executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x19, &(0x7f0000000000)={r2}, 0x8) [ 239.840789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.862051] device veth1_macvtap entered promiscuous mode [ 239.871251] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready 02:55:07 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) [ 239.926557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 239.961883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 239.995999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 02:55:08 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private0}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) 02:55:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000008fc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4101, 0x106c}], 0x1}}], 0x400000000000227, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1300000042000506"], 0x14}}, 0x0) [ 240.047577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.097313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.113183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.131473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.142704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.160699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.171037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.180967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.191387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.202211] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 240.210160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.226587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.233974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.257167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.268761] Started in network mode [ 240.272753] Own node identity fc, cluster identity 4711 [ 240.280103] Enabled bearer , priority 10 [ 240.291567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.303381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.313771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.323949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.333223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.343729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.352958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.363133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.373066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.383528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.393874] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 240.401206] batman_adv: batadv0: Interface activated: batadv_slave_1 02:55:08 executing program 1: set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 02:55:08 executing program 0: syz_mount_image$udf(&(0x7f0000000100)='udf\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 240.415003] Enabling of bearer rejected, already enabled [ 240.421780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.440857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.627842] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 240.634453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.643214] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 240.653242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.662470] loop0: partition table partially beyond EOD, truncated [ 240.678791] loop0: p1 start 1 is beyond EOD, truncated [ 240.693917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.709734] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 240.712481] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 240.765533] loop0: p3 size 2 extends beyond EOD, truncated [ 240.793240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.816756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.826682] loop0: p4 size 32768 extends beyond EOD, truncated [ 240.836783] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 240.850276] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 240.857664] loop0: p5 size 1073741824 extends beyond EOD, truncated [ 240.862270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.865845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.872563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.885761] loop0: p6 size 32768 extends beyond EOD, truncated [ 240.888180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.919677] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 240.943454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.970748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.991282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.011872] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 241.014524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.025288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.032419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.061466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.077770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.099856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:55:09 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 02:55:09 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() getpriority(0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000001fc0)=ANY=[@ANYRES32=r2]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 241.275468] 32-bit node address hash set to fc [ 241.329163] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 241.349179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.374960] hrtimer: interrupt took 26991 ns [ 241.389135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.427133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.439797] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 241.471151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.493400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.509879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:55:09 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x300, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) socket(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 02:55:09 executing program 0: r0 = socket(0x2b, 0x1, 0x0) bind$l2tp(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x2, @empty}, 0x10) 02:55:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$TCXONC(r0, 0x4b3c, 0x0) 02:55:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xc, 0x0, 0x4) 02:55:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x23, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 02:55:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="f7f17489"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 02:55:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x19c, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x19c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 241.691956] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 241.716101] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:55:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffde2, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000034000503d25a80648c63940d0324fc60080000000a000b0005358221f0792e370900098000f01700d1bd", 0x33fe0}], 0x1}, 0x20008840) 02:55:09 executing program 2: set_mempolicy(0x1, &(0x7f0000000080)=0xe4e, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@acquire={0x128, 0x17, 0x7, 0x0, 0x0, {{@in=@dev}, @in6=@private0, {@in6=@local, @in=@local}, {{@in6=@ipv4={[], [], @local}, @in=@loopback}}}}, 0x128}, 0x8}, 0x0) 02:55:09 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) [ 241.793094] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 02:55:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100766c616e00000000100002800c000300000000000001000014000300766c616e30"], 0x54}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) 02:55:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0xff}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0x0, 0x7f}}) 02:55:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup3(r0, r1, 0x0) 02:55:09 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) [ 241.997232] audit: type=1400 audit(1601520909.941:9): avc: denied { create } for pid=8106 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 02:55:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 02:55:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) 02:55:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4, 0x8}}]}, 0x30}}, 0x0) 02:55:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4040ae9e, 0x0) 02:55:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x20001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, &(0x7f0000000040)) 02:55:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 02:55:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 02:55:10 executing program 5: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) clone(0x8191affd, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)='\x00\x00\x00\x00\x00\xb7\x9d\x00\x00\x00', 0x0) 02:55:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x0, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) [ 242.778277] hub 9-0:1.0: USB hub found [ 242.800057] hub 9-0:1.0: 8 ports detected 02:55:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 02:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) 02:55:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 242.935752] hub 9-0:1.0: USB hub found [ 242.943362] hub 9-0:1.0: 8 ports detected 02:55:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 02:55:11 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) timerfd_create(0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:55:11 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:55:11 executing program 5: unshare(0x2a000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b3637b1cd6a13dfbc388cb99aa8f00248c9e133f"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 02:55:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 02:55:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x29f, 0x0, 0xd0}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x18, 0xfffd, 0x0, 0x0, 0x0}) 02:55:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1409, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x40) [ 243.636425] vhci_hcd: invalid port number 253 [ 243.647636] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 02:55:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}}, 0x0) 02:55:11 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:55:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x2c, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) 02:55:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1409, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x40) [ 243.770749] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.811268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:55:11 executing program 2: ioperm(0x0, 0x2, 0xe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) 02:55:11 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$inet6(0xa, 0x3, 0x6b) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 02:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r1, 0x729}, 0x14}}, 0x0) 02:55:11 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 244.044100] ip_vti0: Master is either lo or non-ether device [ 244.052104] audit: type=1326 audit(1601520911.991:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x7fc00000 02:55:12 executing program 0: set_mempolicy(0x1, &(0x7f00000000c0)=0x7ffe, 0xe1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r1, 0x3a2ef8f7794e1a2b, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 02:55:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x29f, 0x0, 0xd0}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) 02:55:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xf3a}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0xfffffffffffffc70) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 02:55:12 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendfile(r0, r0, 0x0, 0x1) 02:55:12 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:55:12 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:55:12 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x24b, 0x0, 0x7be, 0x3}, 0x14) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) pipe(&(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'dummy0\x00'}}, 0x1e) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) pkey_alloc(0x0, 0x2) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x6612, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) [ 244.519407] audit: type=1400 audit(1601520912.461:11): avc: denied { name_bind } for pid=8296 comm="syz-executor.5" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 244.617094] audit: type=1400 audit(1601520912.461:12): avc: denied { node_bind } for pid=8296 comm="syz-executor.5" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 244.653397] audit: type=1400 audit(1601520912.461:13): avc: denied { name_connect } for pid=8296 comm="syz-executor.5" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 02:55:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x8, 0x99, 0x400}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:55:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setfsgid(0x0) 02:55:12 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 02:55:12 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x24b, 0x0, 0x7be, 0x3}, 0x14) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) pipe(&(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'dummy0\x00'}}, 0x1e) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) pkey_alloc(0x0, 0x2) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x6612, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 02:55:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x0) 02:55:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x29f, 0x0, 0xd0}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:55:13 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9}, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x0, 0x0, &(0x7f0000000000)) [ 245.031285] kvm [8319]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 02:55:13 executing program 0: socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) [ 245.079926] kvm [8319]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000007e 02:55:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/52, 0x7ffff006}], 0x1) [ 245.122853] kvm [8319]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001b [ 245.196862] kvm [8319]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000016 [ 245.260881] kvm [8319]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000003d 02:55:13 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 245.330749] kvm [8319]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000004f [ 245.388718] kvm [8319]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000003d 02:55:13 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x3}]) 02:55:13 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x141002, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@l={0x92, 0xb, 0xe0}], 0x8) 02:55:13 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x11, 0xff7f0000, 0x8800000) fallocate(r0, 0x11, 0x0, 0x8801100) 02:55:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 02:55:13 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="740000002400f30700000000ddffffff00000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xa, 0x1000000000000, &(0x7f0000000100)=[{&(0x7f0000000040)="e588da94b522c2d1f313702948718f407fe7166ac45a790cd2095b44582f3310fb073cb29f9afc1ddb6272a61982d91410b9914e7638a71eab6cd729de3c717034a0069e9ed7d8d5fa1979ad04faed8aeb23cac0ab9a4d2927d53b44ef0f6eb8b357570886780d116f40c92841c5a3d72ac31d7abedde3433aa57b7fefb2a6e25f68b39642e8ed4cba1d481661ba"}, {&(0x7f0000000600)="a175aecfc133f10e0296d588d507cb230a905aafe9156c60719627564d1f5841ed3912a4b4d6372b4d52111e6d26ae638675c823527d292fb9cfb0691358daaeed278a87b98817f0efa445e1e8110e40b7979829311002818ea4bfa43e186dbdf71f761f261789a4e4063b30213fc8674cff946703b49ecc157cd063ec3bf08b8f75365561ef81b12e6d77479cb6fba9e4a0e862fe0729da03403caa9b02aff1a185885195"}], 0xe, &(0x7f0000000100)}], 0x126618d46e7cf97, 0x0) 02:55:13 executing program 4: r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="e61830cefc69e6010d65b20b0ece5777e34f8cf133a40f3e2545e233f79bb3b30209", 0x22}], 0x1}}], 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 02:55:13 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x8000000000002, 0xe) r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) 02:55:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000400)) 02:55:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000006400310f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f3ffffff"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 02:55:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x6}]}]}, {0x4}}}]}]}, 0x60}}, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000340)={0x0, 0x5}) [ 246.087204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:55:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x40000, 0x1}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000002c0)=0x4, 0x4) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80) [ 246.131793] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 02:55:14 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) 02:55:14 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10002000}) [ 246.173077] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 02:55:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x8, 0x3}, 0x14}}, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924a17, 0x0) 02:55:14 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="740000002400f30700000000ddffffff00000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xa, 0x1000000000000, &(0x7f0000000100)=[{&(0x7f0000000040)="e588da94b522c2d1f313702948718f407fe7166ac45a790cd2095b44582f3310fb073cb29f9afc1ddb6272a61982d91410b9914e7638a71eab6cd729de3c717034a0069e9ed7d8d5fa1979ad04faed8aeb23cac0ab9a4d2927d53b44ef0f6eb8b357570886780d116f40c92841c5a3d72ac31d7abedde3433aa57b7fefb2a6e25f68b39642e8ed4cba1d481661ba"}, {&(0x7f0000000600)="a175aecfc133f10e0296d588d507cb230a905aafe9156c60719627564d1f5841ed3912a4b4d6372b4d52111e6d26ae638675c823527d292fb9cfb0691358daaeed278a87b98817f0efa445e1e8110e40b7979829311002818ea4bfa43e186dbdf71f761f261789a4e4063b30213fc8674cff946703b49ecc157cd063ec3bf08b8f75365561ef81b12e6d77479cb6fba9e4a0e862fe0729da03403caa9b02aff1a185885195"}], 0xe, &(0x7f0000000100)}], 0x126618d46e7cf97, 0x0) [ 246.714531] ================================================================================ [ 246.723338] UBSAN: Undefined behaviour in net/core/gen_estimator.c:87:38 [ 246.730204] shift exponent -246 is negative [ 246.734532] CPU: 0 PID: 8412 Comm: syz-executor.0 Not tainted 4.19.148-syzkaller #0 [ 246.742322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.751671] Call Trace: [ 246.754250] [ 246.756485] dump_stack+0x22c/0x33e [ 246.760161] ubsan_epilogue+0xe/0x3a [ 246.763881] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 246.770075] ? est_fetch_counters+0xc6/0x160 [ 246.774497] est_timer.cold+0x96/0x126 [ 246.778417] ? est_fetch_counters+0x160/0x160 [ 246.782959] call_timer_fn+0x177/0x760 [ 246.786832] ? est_fetch_counters+0x160/0x160 [ 246.791312] ? init_timer_key+0x370/0x370 [ 246.795495] ? _raw_spin_unlock_irq+0x24/0x90 [ 246.800021] ? est_fetch_counters+0x160/0x160 [ 246.804507] expire_timers+0x243/0x500 [ 246.808387] run_timer_softirq+0x259/0x730 [ 246.812615] ? expire_timers+0x500/0x500 [ 246.816720] ? kvm_sched_clock_read+0x14/0x40 [ 246.821252] ? sched_clock+0x2a/0x50 [ 246.825013] ? sched_clock_cpu+0x18/0x260 [ 246.829183] ? check_preemption_disabled+0x41/0x2b0 [ 246.834266] __do_softirq+0x27d/0xad2 [ 246.838123] irq_exit+0x22d/0x270 [ 246.841567] smp_apic_timer_interrupt+0x15f/0x5d0 [ 246.846412] apic_timer_interrupt+0xf/0x20 [ 246.850629] [ 246.852911] RIP: 0010:___sys_sendmsg+0x412/0x8f0 [ 246.857675] Code: 74 08 3c 03 0f 8e 78 04 00 00 49 8d bf 80 00 00 00 44 8b 65 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 42 04 00 00 48 89 ea 45 89 a7 80 00 00 00 [ 246.876593] RSP: 0018:ffff888052db7a80 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 246.884298] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005c10000 [ 246.891674] RDX: 1ffff1100a5b6fcb RSI: ffffffff861163ed RDI: ffff888052db7e58 [ 246.898932] RBP: ffff888052db7d58 R08: 0000000000000001 R09: 0000000000000000 [ 246.906186] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 246.913441] R13: 1ffff1100a5b6f54 R14: ffff8880800d85c0 R15: ffff888052db7dd8 [ 246.920720] ? ___sys_sendmsg+0x3cd/0x8f0 [ 246.924876] ? __schedule+0x8ed/0x22e0 [ 246.928762] ? copy_msghdr_from_user+0x440/0x440 [ 246.933539] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 246.938345] ? mark_held_locks+0xf0/0xf0 [ 246.942395] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 246.946976] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 246.951735] ? find_held_lock+0x2d/0x110 [ 246.955838] ? __might_fault+0x11f/0x1d0 [ 246.959888] ? lock_downgrade+0x750/0x750 [ 246.964016] ? lock_acquire+0x170/0x3f0 [ 246.967980] ? __might_fault+0xef/0x1d0 [ 246.971955] __sys_sendmmsg+0x195/0x470 [ 246.975948] ? __ia32_sys_sendmsg+0x220/0x220 [ 246.980429] ? lock_downgrade+0x750/0x750 [ 246.984563] ? __might_fault+0x192/0x1d0 [ 246.988675] ? _copy_to_user+0xb8/0x100 [ 246.992653] ? put_timespec64+0xcb/0x120 [ 246.996699] ? jiffies_to_timeval+0xb0/0xb0 [ 247.001009] ? ktime_get_ts64+0x2d3/0x420 [ 247.005174] ? __se_sys_clock_gettime+0x15a/0x250 [ 247.010021] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.014782] __x64_sys_sendmmsg+0x99/0x100 [ 247.019002] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 247.023567] do_syscall_64+0xf9/0x670 [ 247.027371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.032553] RIP: 0033:0x45dd99 [ 247.035730] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.054638] RSP: 002b:00007f9bae5f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.062358] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045dd99 [ 247.069631] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000005 [ 247.076905] RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 [ 247.084187] R10: 000000000000fe80 R11: 0000000000000246 R12: 000000000118bf2c [ 247.091446] R13: 00007ffdc84a618f R14: 00007f9bae5f29c0 R15: 000000000118bf2c [ 247.098728] ================================================================================ [ 247.107497] ================================================================================ [ 247.116084] UBSAN: Undefined behaviour in net/core/gen_estimator.c:88:23 [ 247.122926] shift exponent 255 is too large for 64-bit type 'long long unsigned int' [ 247.130808] CPU: 0 PID: 8412 Comm: syz-executor.0 Not tainted 4.19.148-syzkaller #0 [ 247.138594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.147937] Call Trace: [ 247.150512] [ 247.152678] dump_stack+0x22c/0x33e [ 247.156305] ubsan_epilogue+0xe/0x3a [ 247.160018] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 247.166171] ? est_fetch_counters+0xc6/0x160 [ 247.170576] est_timer.cold+0xd6/0x126 [ 247.174464] ? est_fetch_counters+0x160/0x160 [ 247.178964] call_timer_fn+0x177/0x760 [ 247.182846] ? est_fetch_counters+0x160/0x160 [ 247.187339] ? init_timer_key+0x370/0x370 [ 247.191487] ? _raw_spin_unlock_irq+0x24/0x90 [ 247.195981] ? est_fetch_counters+0x160/0x160 [ 247.200477] expire_timers+0x243/0x500 [ 247.204367] run_timer_softirq+0x259/0x730 [ 247.208600] ? expire_timers+0x500/0x500 [ 247.212661] ? kvm_sched_clock_read+0x14/0x40 [ 247.217153] ? sched_clock+0x2a/0x50 [ 247.220861] ? sched_clock_cpu+0x18/0x260 [ 247.225006] ? check_preemption_disabled+0x41/0x2b0 [ 247.230030] __do_softirq+0x27d/0xad2 [ 247.233841] irq_exit+0x22d/0x270 [ 247.237289] smp_apic_timer_interrupt+0x15f/0x5d0 [ 247.242265] apic_timer_interrupt+0xf/0x20 [ 247.246490] [ 247.248725] RIP: 0010:___sys_sendmsg+0x412/0x8f0 [ 247.253476] Code: 74 08 3c 03 0f 8e 78 04 00 00 49 8d bf 80 00 00 00 44 8b 65 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 42 04 00 00 48 89 ea 45 89 a7 80 00 00 00 [ 247.272383] RSP: 0018:ffff888052db7a80 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 247.280091] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005c10000 [ 247.287355] RDX: 1ffff1100a5b6fcb RSI: ffffffff861163ed RDI: ffff888052db7e58 [ 247.294640] RBP: ffff888052db7d58 R08: 0000000000000001 R09: 0000000000000000 [ 247.301902] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 247.309176] R13: 1ffff1100a5b6f54 R14: ffff8880800d85c0 R15: ffff888052db7dd8 [ 247.316470] ? ___sys_sendmsg+0x3cd/0x8f0 [ 247.320642] ? __schedule+0x8ed/0x22e0 [ 247.324556] ? copy_msghdr_from_user+0x440/0x440 [ 247.329325] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.334079] ? mark_held_locks+0xf0/0xf0 [ 247.338137] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 247.342733] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.347493] ? find_held_lock+0x2d/0x110 [ 247.351551] ? __might_fault+0x11f/0x1d0 [ 247.355616] ? lock_downgrade+0x750/0x750 [ 247.359756] ? lock_acquire+0x170/0x3f0 [ 247.363725] ? __might_fault+0xef/0x1d0 [ 247.367707] __sys_sendmmsg+0x195/0x470 [ 247.371684] ? __ia32_sys_sendmsg+0x220/0x220 [ 247.376176] ? lock_downgrade+0x750/0x750 [ 247.380345] ? __might_fault+0x192/0x1d0 [ 247.384405] ? _copy_to_user+0xb8/0x100 [ 247.388380] ? put_timespec64+0xcb/0x120 [ 247.392434] ? jiffies_to_timeval+0xb0/0xb0 [ 247.396750] ? ktime_get_ts64+0x2d3/0x420 [ 247.400901] ? __se_sys_clock_gettime+0x15a/0x250 [ 247.406438] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.411193] __x64_sys_sendmmsg+0x99/0x100 [ 247.415427] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 247.420008] do_syscall_64+0xf9/0x670 [ 247.423809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.428996] RIP: 0033:0x45dd99 [ 247.432187] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.451097] RSP: 002b:00007f9bae5f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.458825] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045dd99 [ 247.466090] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000005 [ 247.473357] RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 [ 247.480626] R10: 000000000000fe80 R11: 0000000000000246 R12: 000000000118bf2c [ 247.487889] R13: 00007ffdc84a618f R14: 00007f9bae5f29c0 R15: 000000000118bf2c [ 247.495164] ================================================================================ [ 247.503849] ================================================================================ [ 247.512428] UBSAN: Undefined behaviour in net/core/gen_estimator.c:90:46 [ 247.519272] shift exponent -246 is negative [ 247.523630] CPU: 0 PID: 8412 Comm: syz-executor.0 Not tainted 4.19.148-syzkaller #0 [ 247.531423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.540775] Call Trace: [ 247.543357] [ 247.545520] dump_stack+0x22c/0x33e [ 247.549157] ubsan_epilogue+0xe/0x3a [ 247.552876] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 247.559039] ? est_fetch_counters+0xc6/0x160 [ 247.563456] est_timer.cold+0x17/0x126 [ 247.567356] ? est_fetch_counters+0x160/0x160 [ 247.571867] call_timer_fn+0x177/0x760 [ 247.575758] ? est_fetch_counters+0x160/0x160 [ 247.580258] ? init_timer_key+0x370/0x370 [ 247.584420] ? _raw_spin_unlock_irq+0x24/0x90 [ 247.588947] ? est_fetch_counters+0x160/0x160 [ 247.593449] expire_timers+0x243/0x500 [ 247.597405] run_timer_softirq+0x259/0x730 [ 247.601663] ? expire_timers+0x500/0x500 [ 247.605738] ? kvm_sched_clock_read+0x14/0x40 [ 247.610239] ? sched_clock+0x2a/0x50 [ 247.613958] ? sched_clock_cpu+0x18/0x260 [ 247.618108] ? check_preemption_disabled+0x41/0x2b0 [ 247.623140] __do_softirq+0x27d/0xad2 [ 247.626957] irq_exit+0x22d/0x270 [ 247.630427] smp_apic_timer_interrupt+0x15f/0x5d0 [ 247.635272] apic_timer_interrupt+0xf/0x20 [ 247.639501] [ 247.641745] RIP: 0010:___sys_sendmsg+0x412/0x8f0 [ 247.646504] Code: 74 08 3c 03 0f 8e 78 04 00 00 49 8d bf 80 00 00 00 44 8b 65 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 42 04 00 00 48 89 ea 45 89 a7 80 00 00 00 [ 247.665408] RSP: 0018:ffff888052db7a80 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 247.673120] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005c10000 [ 247.680394] RDX: 1ffff1100a5b6fcb RSI: ffffffff861163ed RDI: ffff888052db7e58 [ 247.687681] RBP: ffff888052db7d58 R08: 0000000000000001 R09: 0000000000000000 [ 247.694947] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 247.702215] R13: 1ffff1100a5b6f54 R14: ffff8880800d85c0 R15: ffff888052db7dd8 [ 247.709504] ? ___sys_sendmsg+0x3cd/0x8f0 [ 247.713662] ? __schedule+0x8ed/0x22e0 [ 247.717571] ? copy_msghdr_from_user+0x440/0x440 [ 247.722336] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.727102] ? mark_held_locks+0xf0/0xf0 [ 247.731160] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 247.735749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.740528] ? find_held_lock+0x2d/0x110 [ 247.744591] ? __might_fault+0x11f/0x1d0 [ 247.748660] ? lock_downgrade+0x750/0x750 [ 247.752808] ? lock_acquire+0x170/0x3f0 [ 247.756781] ? __might_fault+0xef/0x1d0 [ 247.760768] __sys_sendmmsg+0x195/0x470 [ 247.764764] ? __ia32_sys_sendmsg+0x220/0x220 [ 247.769288] ? lock_downgrade+0x750/0x750 [ 247.773446] ? __might_fault+0x192/0x1d0 [ 247.777509] ? _copy_to_user+0xb8/0x100 [ 247.781485] ? put_timespec64+0xcb/0x120 [ 247.785566] ? jiffies_to_timeval+0xb0/0xb0 [ 247.789892] ? ktime_get_ts64+0x2d3/0x420 [ 247.794046] ? __se_sys_clock_gettime+0x15a/0x250 [ 247.798891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.803656] __x64_sys_sendmmsg+0x99/0x100 [ 247.807895] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 247.812482] do_syscall_64+0xf9/0x670 [ 247.816287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.822170] RIP: 0033:0x45dd99 [ 247.825365] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.845056] RSP: 002b:00007f9bae5f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.852764] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045dd99 [ 247.860035] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000005 [ 247.867304] RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 [ 247.874592] R10: 000000000000fe80 R11: 0000000000000246 R12: 000000000118bf2c [ 247.881884] R13: 00007ffdc84a618f R14: 00007f9bae5f29c0 R15: 000000000118bf2c [ 247.889859] ================================================================================ [ 247.898510] ================================================================================ [ 247.907115] UBSAN: Undefined behaviour in net/core/gen_estimator.c:91:22 [ 247.913956] shift exponent 255 is too large for 64-bit type 'long long unsigned int' [ 247.921862] CPU: 0 PID: 8412 Comm: syz-executor.0 Not tainted 4.19.148-syzkaller #0 [ 247.929650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.939002] Call Trace: [ 247.941599] [ 247.943771] dump_stack+0x22c/0x33e [ 247.947400] ubsan_epilogue+0xe/0x3a [ 247.951112] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 247.957264] ? est_fetch_counters+0xc6/0x160 [ 247.961672] est_timer.cold+0x5b/0x126 [ 247.965559] ? est_fetch_counters+0x160/0x160 [ 247.970171] call_timer_fn+0x177/0x760 [ 247.974070] ? est_fetch_counters+0x160/0x160 [ 247.978567] ? init_timer_key+0x370/0x370 [ 247.982715] ? _raw_spin_unlock_irq+0x24/0x90 [ 247.987216] ? est_fetch_counters+0x160/0x160 [ 247.991706] expire_timers+0x243/0x500 [ 247.995595] run_timer_softirq+0x259/0x730 [ 247.999856] ? expire_timers+0x500/0x500 [ 248.003915] ? kvm_sched_clock_read+0x14/0x40 [ 248.008408] ? sched_clock+0x2a/0x50 [ 248.012113] ? sched_clock_cpu+0x18/0x260 [ 248.016256] ? check_preemption_disabled+0x41/0x2b0 [ 248.021278] __do_softirq+0x27d/0xad2 [ 248.025086] irq_exit+0x22d/0x270 [ 248.028538] smp_apic_timer_interrupt+0x15f/0x5d0 [ 248.033377] apic_timer_interrupt+0xf/0x20 [ 248.037623] [ 248.039858] RIP: 0010:___sys_sendmsg+0x412/0x8f0 [ 248.044609] Code: 74 08 3c 03 0f 8e 78 04 00 00 49 8d bf 80 00 00 00 44 8b 65 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 42 04 00 00 48 89 ea 45 89 a7 80 00 00 00 [ 248.063524] RSP: 0018:ffff888052db7a80 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 248.071227] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005c10000 [ 248.078506] RDX: 1ffff1100a5b6fcb RSI: ffffffff861163ed RDI: ffff888052db7e58 [ 248.085769] RBP: ffff888052db7d58 R08: 0000000000000001 R09: 0000000000000000 [ 248.093029] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 248.100292] R13: 1ffff1100a5b6f54 R14: ffff8880800d85c0 R15: ffff888052db7dd8 [ 248.107605] ? ___sys_sendmsg+0x3cd/0x8f0 [ 248.111801] ? __schedule+0x8ed/0x22e0 [ 248.115688] ? copy_msghdr_from_user+0x440/0x440 [ 248.120459] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 248.125238] ? mark_held_locks+0xf0/0xf0 [ 248.129294] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 248.133873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 248.138634] ? find_held_lock+0x2d/0x110 [ 248.142694] ? __might_fault+0x11f/0x1d0 [ 248.146753] ? lock_downgrade+0x750/0x750 [ 248.150895] ? lock_acquire+0x170/0x3f0 [ 248.154864] ? __might_fault+0xef/0x1d0 [ 248.158842] __sys_sendmmsg+0x195/0x470 [ 248.162815] ? __ia32_sys_sendmsg+0x220/0x220 [ 248.167308] ? lock_downgrade+0x750/0x750 [ 248.171458] ? __might_fault+0x192/0x1d0 [ 248.175518] ? _copy_to_user+0xb8/0x100 [ 248.179486] ? put_timespec64+0xcb/0x120 [ 248.183555] ? jiffies_to_timeval+0xb0/0xb0 [ 248.187871] ? ktime_get_ts64+0x2d3/0x420 [ 248.192020] ? __se_sys_clock_gettime+0x15a/0x250 [ 248.196861] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 248.201639] __x64_sys_sendmmsg+0x99/0x100 [ 248.205886] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 248.210464] do_syscall_64+0xf9/0x670 [ 248.214263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.219465] RIP: 0033:0x45dd99 [ 248.222653] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.241550] RSP: 002b:00007f9bae5f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.249253] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045dd99 [ 248.256515] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000005 [ 248.263775] RBP: 000000000118bf68 R08: 0000000000000000 R09: 0000000000000000 [ 248.271036] R10: 000000000000fe80 R11: 0000000000000246 R12: 000000000118bf2c [ 248.278304] R13: 00007ffdc84a618f R14: 00007f9bae5f29c0 R15: 000000000118bf2c [ 248.285581] ================================================================================ 02:55:15 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) 02:55:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xa0002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0xfffffffe) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000024000b0f00000000000000", @ANYRES32=r2], 0x3c}}, 0x0) unshare(0x20600) getpgid(0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x80800, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sysfs$1(0x1, 0x0) socket(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @local}}) pipe(0x0) [ 248.467002] bond0: Releasing backup interface bond_slave_1 02:55:16 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000000300), 0x0) 02:55:16 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="740000002400f30700000000ddffffff00000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xa, 0x1000000000000, &(0x7f0000000100)=[{&(0x7f0000000040)="e588da94b522c2d1f313702948718f407fe7166ac45a790cd2095b44582f3310fb073cb29f9afc1ddb6272a61982d91410b9914e7638a71eab6cd729de3c717034a0069e9ed7d8d5fa1979ad04faed8aeb23cac0ab9a4d2927d53b44ef0f6eb8b357570886780d116f40c92841c5a3d72ac31d7abedde3433aa57b7fefb2a6e25f68b39642e8ed4cba1d481661ba"}, {&(0x7f0000000600)="a175aecfc133f10e0296d588d507cb230a905aafe9156c60719627564d1f5841ed3912a4b4d6372b4d52111e6d26ae638675c823527d292fb9cfb0691358daaeed278a87b98817f0efa445e1e8110e40b7979829311002818ea4bfa43e186dbdf71f761f261789a4e4063b30213fc8674cff946703b49ecc157cd063ec3bf08b8f75365561ef81b12e6d77479cb6fba9e4a0e862fe0729da03403caa9b02aff1a185885195"}], 0xe, &(0x7f0000000100)}], 0x126618d46e7cf97, 0x0) 02:55:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000440)) 02:55:16 executing program 2: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x172, &(0x7f00000002c0)="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"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 248.554484] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.566042] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.590791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.787546] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.807443] ptrace attach of "/root/syz-executor.2"[8479] was attempted by "/root/syz-executor.2"[8486] 02:55:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r3, r5, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r1, r7, r9) 02:55:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x90, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x90}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x50}}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 02:55:16 executing program 2: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x172, &(0x7f00000002c0)="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"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 02:55:16 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) [ 248.947594] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 02:55:17 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 02:55:17 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="740000002400f30700000000ddffffff00000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xa, 0x1000000000000, &(0x7f0000000100)=[{&(0x7f0000000040)="e588da94b522c2d1f313702948718f407fe7166ac45a790cd2095b44582f3310fb073cb29f9afc1ddb6272a61982d91410b9914e7638a71eab6cd729de3c717034a0069e9ed7d8d5fa1979ad04faed8aeb23cac0ab9a4d2927d53b44ef0f6eb8b357570886780d116f40c92841c5a3d72ac31d7abedde3433aa57b7fefb2a6e25f68b39642e8ed4cba1d481661ba"}, {&(0x7f0000000600)="a175aecfc133f10e0296d588d507cb230a905aafe9156c60719627564d1f5841ed3912a4b4d6372b4d52111e6d26ae638675c823527d292fb9cfb0691358daaeed278a87b98817f0efa445e1e8110e40b7979829311002818ea4bfa43e186dbdf71f761f261789a4e4063b30213fc8674cff946703b49ecc157cd063ec3bf08b8f75365561ef81b12e6d77479cb6fba9e4a0e862fe0729da03403caa9b02aff1a185885195"}], 0xe, &(0x7f0000000100)}], 0x126618d46e7cf97, 0x0) [ 249.080959] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 02:55:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 02:55:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000000)={[{@noflushoncommit='noflushoncommit'}]}) 02:55:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x90, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x90}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x50}}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) [ 249.201704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 249.260709] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 249.269569] syz-executor.3 (8503) used greatest stack depth: 22968 bytes left [ 249.279799] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 249.321482] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 02:55:17 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) fcntl$dupfd(r2, 0x0, r3) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) [ 249.536796] audit: type=1800 audit(1601520917.481:14): pid=8518 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15817 res=0 02:55:17 executing program 4: pipe(&(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) readv(r0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) 02:55:17 executing program 0: ioperm(0x0, 0x1, 0x8000) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x3f, &(0x7f0000000480)="c4c691094bca019919da07ae2df75511878f43e907000000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 02:55:17 executing program 5: setresuid(0xee01, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x218c32, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:55:17 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)) [ 250.596123] EXT4-fs (sda1): re-mounted. Opts: (null) [ 250.613931] EXT4-fs (sda1): re-mounted. Opts: (null) 02:55:19 executing program 2: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x172, &(0x7f00000002c0)="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"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 02:55:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000ac0)="ee", 0xff00}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x48000000}, 0x700) 02:55:19 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) 02:55:19 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x224040, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 02:55:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x90, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x90}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x50}}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 02:55:19 executing program 5: setresuid(0xee01, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x218c32, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:55:20 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x5, 0x91, &(0x7f00000000c0)=0x1f}) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r1, 0x0) socket$inet_sctp(0x2, 0x801, 0x84) [ 252.093226] EXT4-fs (sda1): re-mounted. Opts: (null) 02:55:20 executing program 5: setresuid(0xee01, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x218c32, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:55:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@remote, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x7f) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 02:55:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000ac0)="ee", 0xff00}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x48000000}, 0x700) 02:55:20 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e666174000280010002", 0x11}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)) [ 252.328072] EXT4-fs (sda1): re-mounted. Opts: (null) 02:55:20 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 252.438094] FAT-fs (loop4): invalid media value (0x00) [ 252.457027] FAT-fs (loop4): Can't find a valid FAT filesystem [ 252.532672] FAT-fs (loop4): invalid media value (0x00) [ 252.542885] FAT-fs (loop4): Can't find a valid FAT filesystem [ 253.467087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.490892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.502174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.516073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.537480] device bridge_slave_1 left promiscuous mode [ 253.543899] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.560660] device bridge_slave_0 left promiscuous mode [ 253.566397] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.589702] device veth1_macvtap left promiscuous mode [ 253.595772] device veth0_macvtap left promiscuous mode [ 253.601199] device veth1_vlan left promiscuous mode [ 253.612588] device veth0_vlan left promiscuous mode 02:55:22 executing program 2: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x172, &(0x7f00000002c0)="f7f2bf3c0f339e00000000000000040000000000400000a1e67d63e9a7a72772236de78f0e62180f2de982090f9d39cf602f76a4690dd5743fcd1a3407cd4e952a62140ad915925c58ff1b859ad61a9cb1bf3460ad60bb92639cbedd55c6c29ca5f617fa53682abf0970a377337ca862a213b5cd8d1e78f0615729a5422e5c923116755eb4c0ab4f1ab9953e285d95db7930c289e2422919cf6e12ebd8e231c74cca472c493fdf3b266182579d5245ace3c7492e5571610062414fdc7f121e6192324da9100c39e9795374bbeb111d7354493148a2fd5c1dab56f003a7dcb6efa010ab5de431f08be45a6fc20b3471d099b4fc13c1317a5110f24c7e11ac68a7597cadb7c5919d389f9ea411cb64682d1c83eddf668ea030bc219d9f8aef12106ad7395ddbb58e6236f232ae359e1cede35f18863a496d74eacd581519c9180318e4cb4a83e0c652706f21ce5edd6eb1223a9213e2d9ea5b79f1f9ba5432215f9c3706831cde82f66616bfa56ab133813187"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 02:55:22 executing program 5: setresuid(0xee01, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x218c32, 0x0) socket$netlink(0x10, 0x3, 0x0) 02:55:22 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/198) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) futex(&(0x7f0000000040), 0x8b, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) 02:55:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) [ 255.132190] EXT4-fs (sda1): re-mounted. Opts: (null)