[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.766788][ T31] audit: type=1800 audit(1569611869.829:25): pid=11090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.789674][ T31] audit: type=1800 audit(1569611869.849:26): pid=11090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.824739][ T31] audit: type=1800 audit(1569611869.879:27): pid=11090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. 2019/09/27 19:18:03 fuzzer started 2019/09/27 19:18:07 dialing manager at 10.128.0.26:37065 2019/09/27 19:18:07 syscalls: 2385 2019/09/27 19:18:07 code coverage: enabled 2019/09/27 19:18:07 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/27 19:18:07 extra coverage: enabled 2019/09/27 19:18:07 setuid sandbox: enabled 2019/09/27 19:18:07 namespace sandbox: enabled 2019/09/27 19:18:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/27 19:18:07 fault injection: enabled 2019/09/27 19:18:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/27 19:18:07 net packet injection: enabled 2019/09/27 19:18:07 net device setup: enabled 19:20:46 executing program 0: syzkaller login: [ 252.144494][T11254] IPVS: ftp: loaded support on port[0] = 21 [ 252.282339][T11254] chnl_net:caif_netlink_parms(): no params data found [ 252.338703][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.345976][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.354709][T11254] device bridge_slave_0 entered promiscuous mode [ 252.364622][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.371799][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.380606][T11254] device bridge_slave_1 entered promiscuous mode [ 252.412347][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.425068][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.457464][T11254] team0: Port device team_slave_0 added [ 252.466873][T11254] team0: Port device team_slave_1 added [ 252.588288][T11254] device hsr_slave_0 entered promiscuous mode [ 252.704413][T11254] device hsr_slave_1 entered promiscuous mode [ 252.844118][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.851348][T11254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.859162][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.866420][T11254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.945583][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.967261][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.980000][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.990870][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.002291][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 253.023462][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.041128][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.050991][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.058249][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.115851][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.125276][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.133936][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.144558][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.154374][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.163900][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.172962][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.186652][T11254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.198562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.239993][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 19:20:48 executing program 0: 19:20:48 executing program 0: 19:20:48 executing program 0: 19:20:48 executing program 0: 19:20:48 executing program 0: 19:20:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) ioctl$TUNGETDEVNETNS(r0, 0xc0182101, 0x21000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1000, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400000, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000000)=@random={'osx.', 'selinuxvboxnet1(.vboxnet1{\x00'}, &(0x7f0000000040)=',\'*]\x00', 0x5, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) dup3(r3, r1, 0x80000) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r4 = getpid() getpriority(0x1, r4) syz_open_procfs(r4, &(0x7f0000000180)='net/sctp\x00') getpgid(0xffffffffffffffff) unshare(0x40000000) write$P9_RWALK(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="4a0000006f02000500080100000006000000000000000103000000060000000000000001000000000800000000000000280179e48e0eca4bbc9b996987fd34c779000000020000000000000000000000000000000000000000f1b4e6ec3b91c749407c267c36a4570d01469ce8e49c227c7f36186c201ecd0b8ac61dee73e178676b4e2d77583fc9d4cb9199a98fec0f41e55a7aff0a7d0ed99f19e1102fe0972f30d8c433f394"], 0xa7) times(&(0x7f0000000100)) [ 253.828646][T11273] IPVS: ftp: loaded support on port[0] = 21 [ 253.911195][T11273] IPVS: ftp: loaded support on port[0] = 21 19:20:49 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008003e1bc4b62c5d1c7f2cdd94a31dcebc6fb88cdcf6722bc18f854a2ab876b21eb80ae3f2497aa8df0ff22b0086f02d0d10384a822e88e5f159f9638eda515f9c6b4a93f33075be41a7204330db687333c3e869da8cd3ec3295c138c8f545238c392248af8cb1d03f03153d01939c0adbbbb9d2194c4a1f2d737a45be2403520cc2705a93b56853cf5e74290b3c784f355476f665d380deed2a8074ec56a00eb9490d348a8f2c2cfd71fc", @ANYRES32, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r1) ioctl$TUNGETDEVNETNS(r1, 0xc0182101, 0x21000000) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={r4, r5, r2}, 0xc) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000580)={r9, r10, r7}, 0xc) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) setsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000580)={r13, r14, r11}, 0xc) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) setsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000580)={r17, r18, r15}, 0xc) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r20 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) setsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000580)={r21, r22, r19}, 0xc) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)={0x288, 0xfffffffffffffffe, 0x6, [{{0x0, 0x1, 0x80000001, 0xd0, 0x4, 0x8, {0x1, 0x800, 0x3ff, 0x6, 0x7, 0x101, 0x8, 0x100, 0x7ff, 0x7, 0x1, r5, r6, 0x0, 0x1}}, {0x1, 0x0, 0x1, 0x9, '%'}}, {{0x2, 0x0, 0x0, 0x8000, 0xffffffff, 0xe94, {0x3, 0x3f, 0x9, 0x31, 0x12f, 0x5, 0x5, 0x4, 0x2d7, 0x83, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x81}}, {0x3, 0x8, 0x0, 0x1}}, {{0x1, 0x0, 0x2400000000000000, 0x1ff, 0x5, 0x80000000, {0x4, 0x4, 0x4, 0xfffffffffffffff7, 0x8000, 0x7, 0x26, 0x7f, 0x2, 0x3, 0x8, r10, r11, 0x10001}}, {0x2, 0xfffffffffffffc00, 0xd, 0x1571, 'securitywlan0'}}, {{0x2, 0x0, 0x6, 0x3, 0x200, 0x1, {0x2, 0x7, 0x4, 0x1, 0x0, 0x80000000, 0x0, 0x1, 0xffffffff, 0x7, 0x3, r18, r19, 0x6, 0xffff}}, {0x6, 0x100000001, 0x0, 0x800}}]}, 0x288) [ 254.571394][T11277] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 254.580030][T11277] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 254.588220][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 19:20:49 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r4) ioctl$TUNGETDEVNETNS(r4, 0xc0182101, 0x21000000) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000000)) setsockopt$inet_udp_int(r3, 0x11, 0x200001000000067, &(0x7f0000000280)=0x806, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 19:20:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="380000000000000000000000000000000000000000000000080000000000000009000000000000002f80b876000000000000000000000000a71877478d39a31f3b6191dfbd07356420f3f9e0f37143841ce012b2369b8e8a03634b8b3a67b585750688661cb60074184d55ef771fd07ea587b2bd7abcba4328c4557235188ec28bd57c4c709572411e8fdecebef8c0c6e86d078d475656fc4bbe023a799d893a2a611c1904a71def5d26727fd82a3c359696f7d81787b5ee44d410db424f66016e"], 0xc1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r3) ioctl$TUNGETDEVNETNS(r3, 0xc0182101, 0x21000000) r4 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x80000000}]}, 0x10) r5 = dup(r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, r6, 0x605}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r6, 0x324, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x83223c94df511c0f) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.295319][T11287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 19:20:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000071, 0x4b565a00], [0xc1]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000000)) 19:20:51 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x60002, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x7f) r2 = accept4(r0, 0x0, &(0x7f0000000140), 0x80800) sendto$inet6(r2, &(0x7f0000000180)="821f680af3e1defa2c49f6e4b2e6aae38f04bd9c6a8426995a806611c95d498d51d2f89e25", 0x25, 0x14020000, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000000, @empty, 0x3}, 0x1c) r3 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x10000, 0x22) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc4bf}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc92}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaa}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20000840) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x10000, 0x0) ioctl(r5, 0x1, &(0x7f0000000480)="e8d40a72e9c9634f88b39d2d9b1d2176805411bff9480a6161bff1dc3a51d2f3509a4a6ee0ce6b46b5de30b5970de2df8c5d6e56d6285439884fefa8d8424de970e94a666d48be6c0d849d430abb398e766aff148124bedc4e62257117a138cb4410fd4488510ab28fb60295955a03c7e336a7cdd6901ef50e7d219e9c68d9f3e9211028ab096b2f143425cb33") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000540)={0x2, 0x2, 0xfffffffc, 0x0, 0x6}) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r6, 0x40045730, &(0x7f00000005c0)=0x100) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000600)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) syz_open_dev$usb(&(0x7f0000000640)='/dev/bus/usb/00#/00#\x00', 0x6, 0x111002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000680)={0x67, @multicast1, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x8, 0x43}, 0x2c) r8 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0xdeb602d9ea71aad0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000880)=0xe8) sendto$packet(r8, &(0x7f0000000700)="b9dce73178459b2ac550f99c8913459bcb7f49118308b0578e6602e6987dfaaa3aec0e60296d8c4a5faf34dcc083a7538acec9a4e144eafd994ba7a14258473ef79386ce7f89dd18bce692f24e34d05ac5bee52b7cd985ffbc94", 0x5a, 0x20000000, &(0x7f00000008c0)={0x11, 0x10, r9, 0x1, 0x9b, 0x6, @remote}, 0x14) r10 = semget(0x2, 0x3, 0x25) semctl$IPC_INFO(r10, 0x2, 0x3, &(0x7f0000000900)=""/117) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/dlm-control\x00', 0x28040, 0x0) r11 = syz_open_dev$admmidi(&(0x7f00000009c0)='/dev/admmidi#\x00', 0x1, 0x101000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r11, 0x84, 0x12, &(0x7f0000000a00)=0x9505, 0x4) r12 = getpgrp(0x0) syz_open_procfs(r12, &(0x7f0000000a40)='fd\x00') [ 256.289893][T11296] IPVS: ftp: loaded support on port[0] = 21 [ 256.441282][T11296] chnl_net:caif_netlink_parms(): no params data found [ 256.507762][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.515621][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.524428][T11296] device bridge_slave_0 entered promiscuous mode [ 256.540852][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.549139][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.557921][T11296] device bridge_slave_1 entered promiscuous mode [ 256.596212][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.609032][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.647244][T11296] team0: Port device team_slave_0 added [ 256.657046][T11296] team0: Port device team_slave_1 added [ 256.908435][T11296] device hsr_slave_0 entered promiscuous mode [ 256.984948][T11296] device hsr_slave_1 entered promiscuous mode [ 257.023851][T11296] debugfs: Directory 'hsr0' with parent '/' already present! [ 257.066868][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.074132][T11296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.081861][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.089126][T11296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.174193][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.207599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.225100][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.243246][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.266511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 257.296761][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.315245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.324735][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.331953][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.392156][T11296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.402684][T11296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.436124][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.445198][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.452403][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.463735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.473925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.483423][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.493069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.518823][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.523913][ T28] Bluetooth: hci0: command 0x1003 tx timeout [ 257.528193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.541328][T11294] Bluetooth: hci0: sending frame failed (-49) [ 257.564688][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.661075][T11300] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20002 [ 257.688775][T11300] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20002 19:20:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000006c0)=0x5, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x148e5) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="00000e00ffffffff0000000008000100736662002c00020028000100"/64], 0x58}, 0x1, 0x0, 0x0, 0x404a000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xe}}}, 0x24}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x5, 0x0, [{0x4000, 0x84, &(0x7f0000000380)=""/132}, {0xe000, 0x8a, &(0x7f0000000440)=""/138}, {0x3000, 0x37, &(0x7f0000000280)=""/55}, {0x1000, 0x5b, &(0x7f0000000500)=""/91}, {0x1, 0x63, &(0x7f0000000580)=""/99}]}) 19:20:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r2) ioctl$TUNGETDEVNETNS(r2, 0xc0182101, 0x21000000) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 19:20:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r1) ioctl$TUNGETDEVNETNS(r1, 0xc0182101, 0x21000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r3, 0x801}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x130, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x518}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'nlmon0\x00'}}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x864}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7df}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x849}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x44082}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000065009b410d75b7e09aa50100000000000000000080a7ffdbda0000001e015c6960ce6f33de00000000"], 0x40}}, 0x0) 19:20:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write(r0, &(0x7f0000000040)="142491edb368600b6b89bb", 0xb) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) r2 = gettid() mq_notify(r1, &(0x7f0000000080)={0x0, 0x36, 0x2, @tid=r2}) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'rr\x00', 0xfffffffffffffffe, 0xffffffffffffffff, 0x2e}, 0x2c) [ 258.033984][T11313] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.049762][T11314] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 19:20:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r3) ioctl$TUNGETDEVNETNS(r3, 0xc0182101, 0x21000000) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040)=0x4, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000) [ 258.140933][T11317] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x26ed/0x2cb0 19:20:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x3080, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 19:20:53 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbff, 0xdf135d563e05deb4}, 0xc, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="855fdb2820075e2c4c70a405ba3ec8de5a08"], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r4) ioctl$TUNGETDEVNETNS(r4, 0xc0182101, 0x21000000) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000000)={0x3, 0x5}) 19:20:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8001000008912, &(0x7f0000000040)="afdca50d1e8e96737bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000ef4a4e09f06bca55a4e01fd0487954603647d017b3eb7057666739fb0249feebda876f8f487eedd6e1", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100706965000c0002000800030000000000"], 0x38}}, 0x0) 19:20:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x28, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) 19:20:54 executing program 1: syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff020008004500005c000000000001010000000000000014110571318ddd14d9e7670161d5a500400000000000000000210000ac14140dac141400082c000000000000722a552e7700000000e000000200000004e00000010000000000000000"], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r2, 0x10000, &(0x7f0000000400)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000440)=r6) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x14}, {@remote, 0x4e21, 0x7, 0xffff, 0x7b, 0x2}}, 0x49) r8 = memfd_create(&(0x7f0000000c40)='memory.events\x00\xf0\xb5zCw/Z3\xac\xa2\xd2\xc4\x1c~\xf9M\xe7\xd2R\xe9\x1f\x99 >\xa7\xfe\xb6\xcbQH\xf5\xee\xdfL\xbev\x98\'\x14\xbd\"\xcfT\xde\xe7\x11+\xa5\x9b\xbdMy\xc7\x9b\x9a\x8d\xf5\x978\xb8\x8e>X\xeaq\x9a\xc4\x90\x14\xf5\xae\x90\v\x06\x86\xd1\x1d\x82n\xfa7\xe7}\xc9\xf1u\xee\xb9\xf2\ar\xc8\xeb\x15\x93\xf7\xd5\x14\x8dD\x88\xe4\xca3\x032f\x11%s\xc28\x94\xb9\xd8\xa2\x86\x8c\xf9\xa3;G\x90\xef\xbf\xd9\xb5j}\xec\xc9\x1f&r\xb9I\xba`\xc0\xfen\xf0\xe8\x03\xf0\xee\x82\xbd5b=\xd9\xda^\xb7k`\xedz\x86P\xba\xc9\v\x1fgt\xbaN\xfe7)\xd5\xa4\xf9\xc0\xfa\f_\x15\xd5\xe2v\r)\xa6\xdc\xe3B\x17\xb2\xb2\a\xad\xe6\xa0*\x95\xb2\x91,^\xed3o\x1di\x14\x81>\xa8\xdcb\xe7\x8a\xfc', 0x0) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup3(r9, r8, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000980), 0x13f}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[]}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x4, 0x300000) sendmsg$nl_route(r11, &(0x7f0000000240)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x2c}}, 0x0) sendmsg$key(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x174}}, 0x0) [ 259.213932][T11344] bridge0: port 3(team0) entered blocking state [ 259.220402][T11344] bridge0: port 3(team0) entered disabled state [ 259.229052][T11344] device team0 entered promiscuous mode [ 259.234742][T11344] device team_slave_0 entered promiscuous mode [ 259.241301][T11344] device team_slave_1 entered promiscuous mode [ 259.248863][T11344] bridge0: port 3(team0) entered blocking state [ 259.255348][T11344] bridge0: port 3(team0) entered forwarding state [ 259.290486][ C1] hrtimer: interrupt took 28685 ns [ 259.615638][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 259.621919][T11294] Bluetooth: hci0: sending frame failed (-49) [ 261.683802][ T5] Bluetooth: hci0: command 0x1009 tx timeout 19:21:01 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) signalfd(r0, &(0x7f0000000000)={0x800}, 0x8) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='self\x00', 0x0, 0xffffffffffffffff) mq_timedsend(r0, &(0x7f00000000c0)="1958d5", 0x3, 0x61f, &(0x7f0000000100)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) lchown(&(0x7f0000000140)='./file0\x00', r3, r4) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x8, 0x40000) connect$caif(r5, &(0x7f00000003c0), 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r6, 0x40086424, &(0x7f0000000500)={r7, 0x46c6885f7417f33e}) r8 = dup(0xffffffffffffffff) bind$can_raw(r8, &(0x7f0000000540)={0x1d, r2}, 0x10) r9 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x4, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r9, 0x4010aeab, &(0x7f00000005c0)={0x8, 0xe80a}) getpeername(0xffffffffffffffff, &(0x7f0000000600)=@ipx, &(0x7f0000000680)=0x80) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000006c0)) r10 = accept(0xffffffffffffffff, &(0x7f0000000700)=@in, &(0x7f0000000780)=0x80) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r11 = getpid() prlimit64(r11, 0x8, &(0x7f0000000840)={0x4, 0x1}, &(0x7f0000000880)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000008c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r12, 0x1, &(0x7f0000000900)=""/210) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/vcs\x00', 0x505040, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r13, 0x6431) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x4e22, 0x3, @rand_addr="f3d120c9399c9f015d10bfd06fe23039", 0x800}}, 0x0, 0x0, 0x0, "e73b1322ac219c543eff884dfdce13337f919ee6fb518dd91c89f091389b8674409a1100348353bac9ce9a33170494f0b8de24c50ffe25ef508c11a30b13e6dc67bdffa7ab137575a47add0595cb9ce7"}, 0xd8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000b40)={0x0, 0xaa, 0x0, 0x5, 0x8}, &(0x7f0000000b80)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f0000000bc0)={r14, 0x9, 0x20}, &(0x7f0000000c00)=0xc) 19:21:01 executing program 1: r0 = socket$inet6(0xa, 0x8000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x12c, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca116b02eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271e4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002a001fff000020000000000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/12], 0x24}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x12}, r7}, 0x14) sendfile(r0, r1, &(0x7f0000000040)=0xa3, 0x20000000009c) 19:21:01 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x48a246) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x7, 0x5, 0x3f, 0x80000000, 'syz1\x00', 0x9}, 0x2, 0x100, 0x2, r1, 0x1, 0x8, 'syz0\x00', &(0x7f0000000040)=['ppp0em1&:-cgroup\x00'], 0x11, [], [0x7, 0x9, 0x1ff, 0xff]}) exit(0x5f4e0237) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x114430, r0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x3, 0xb3911c59ddc19e1e) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r2 = dup3(0xffffffffffffffff, r0, 0x80000) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x100000001, 0x400) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x2000) ioctl$KDENABIO(r5, 0x4b36) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000340)={{0x3, @addr=0x1}, 0x8, 0x100, 0x7}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f00000003c0)={0x1, 0x9, @name="e1de2f6fc5dc02b32b61b3f13de484101855a94d7e4d0b24695402c7b5b2d584"}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x101000, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', r8}) r9 = geteuid() r10 = getegid() getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) r12 = getuid() mount$fuseblk(&(0x7f0000000500)='/dev/loop0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x2000, &(0x7f0000000680)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}], [{@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r11}}, {@smackfsdef={'smackfsdef', 0x3d, 'posix_acl_access'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_user={'obj_user', 0x3d, '/dev/rtc#\x00'}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@fowner_gt={'fowner>', r12}}]}}) connect(r4, &(0x7f0000000840)=@ax25={{0x3, @null}, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @default]}, 0x80) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/ipv6_route\x00') ioctl$TIOCMBIC(r13, 0x5417, &(0x7f0000000900)=0x7f) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000940)={0x4, 0xe19d, 0xca5a, 0x0, 0x11}) r14 = syz_open_dev$cec(&(0x7f00000009c0)='/dev/cec#\x00', 0x2, 0x2) write$P9_RAUTH(r14, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x20, 0x0, 0x5}}, 0x14) 19:21:01 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x50200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4104008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}]}, 0x58}}, 0xc000) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x5) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x96d5e2c6e09962cf, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004000}, 0x80) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000340)) r4 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x800) ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f00000003c0)={0xa9, "cce98f8c4a2d4f0627e3159608f81252751bfdaf6150212752d8f1811a002a38d803a8b4591f4cf6f95d306a1f1b85157800bd95067e1baaa000a26c12a6cb3e269d0c73481e0d255061ddaef01748e3902673ecf28cb9925aa43ea83c0da28995516a5b6d65492e491ef1835168b8cce7c91100430f68d386c4f98d4578bb27b4d1620e2286c2641fe560617f1ac4ebf293b7a0c1ef3a952eef9fb6dfb17b93d4ec2e97952ca910e5"}) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x10) r5 = dup(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000480)={0xa, 0x2, 0x9}, 0xa) r6 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x1a00000, 0x6, 0xd0800000, 0x80, 0x10001, 0x18000, 0x4], 0x7, 0x4, 0x57, 0x1ff, 0x7f, 0x5, {0x4, 0x1, 0x7ff, 0x4, 0x9, 0x1ff, 0x800, 0x2, 0x1, 0x8, 0x100, 0xe4, 0x3, 0x9, "0c633a7693675fe3d9092ffc675ea701531d0c4e3a01fe5b404fbce9ad1456b9"}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000005c0)="237f2c9a47d8b3a7cf42c14a15e6f75b", 0x10) ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x7) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) openat$capi20(0xffffffffffffff9c, &(0x7f0000000680)='/dev/capi20\x00', 0x101000, 0x0) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) r8 = creat(&(0x7f0000000780)='./file0\x00', 0x8) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000800)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4006085}, 0x4000000) r10 = syz_open_dev$cec(&(0x7f0000000900)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000000940)={0xbc6}, 0x4) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80400) ioctl$FS_IOC_SETFSLABEL(r11, 0x41009432, &(0x7f0000000980)="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") 19:21:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r2) ioctl$TUNGETDEVNETNS(r2, 0xc0182101, 0x21000000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r4) ioctl$TUNGETDEVNETNS(r4, 0xc0182101, 0x21000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x4000000a}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f00000000c0)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0010058, 0x2], [0xc1]}) 19:21:01 executing program 1: r0 = socket$inet6(0xa, 0x8000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x12c, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca116b02eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271e4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002a001fff000020000000000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/12], 0x24}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x12}, r7}, 0x14) sendfile(r0, r1, &(0x7f0000000040)=0xa3, 0x20000000009c) 19:21:01 executing program 1: socket$inet6(0xa, 0x80001, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) ioctl$TUNGETDEVNETNS(r0, 0xc0182101, 0x21000000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 19:21:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x3c, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x2500}, @IFLA_BR_VLAN_STATS_ENABLED={0x8, 0x29, 0x7}, @IFLA_BR_MCAST_STATS_ENABLED={0x8}, @IFLA_BR_MCAST_MLD_VERSION={0x8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x8}]}}}]}, 0x6c}}, 0x0) [ 266.739250][T11367] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 266.747790][T11367] netlink: 'syz-executor.1': attribute type 41 has an invalid length. [ 266.756115][T11367] netlink: 'syz-executor.1': attribute type 42 has an invalid length. [ 266.764408][T11367] netlink: 'syz-executor.1': attribute type 44 has an invalid length. [ 266.772626][T11367] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 267.005947][T11368] IPVS: ftp: loaded support on port[0] = 21 [ 267.148088][T11369] IPVS: ftp: loaded support on port[0] = 21 19:21:02 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') rmdir(&(0x7f0000000100)='./file0\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x62}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 267.227694][T11370] IPVS: ftp: loaded support on port[0] = 21 [ 267.420228][T11368] chnl_net:caif_netlink_parms(): no params data found [ 267.594515][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.601731][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.610716][T11368] device bridge_slave_0 entered promiscuous mode 19:21:02 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000007997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fff0f0000000000e455b088c2a08594e391798e4fd4959ba9b5a7b0588736060000000d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda870000000002000100000000000000080000ffffff05000500000000000a000001def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x800) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r2) ioctl$TUNGETDEVNETNS(r2, 0xc0182101, 0x21000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r3, 0x55db, 0x2, [0xa7, 0x5]}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x9, 0x7, 0xdc, {}, 0xe8f9, 0x800}) r4 = socket$key(0xf, 0x3, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x40, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400024c, 0x0) [ 267.685106][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.692323][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.701351][T11368] device bridge_slave_1 entered promiscuous mode [ 267.709912][T11369] chnl_net:caif_netlink_parms(): no params data found [ 267.739076][T11370] chnl_net:caif_netlink_parms(): no params data found [ 267.840531][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.848038][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.856659][T11369] device bridge_slave_0 entered promiscuous mode [ 267.877362][T11368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.901456][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.909339][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.917958][T11369] device bridge_slave_1 entered promiscuous mode [ 267.958114][T11368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.977386][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.984856][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.993509][T11370] device bridge_slave_0 entered promiscuous mode [ 268.017156][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.065160][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.072437][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.081273][T11370] device bridge_slave_1 entered promiscuous mode [ 268.091709][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.103586][T11368] team0: Port device team_slave_0 added 19:21:03 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x1f, 0x3f}, 0x8) memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x100000001) write$binfmt_script(r3, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="a3429db61d95c454cc9b15747352989992889e4c078b131f612bbe66958e606965f2d2f6549e7ef445465c45a997bb65487944a20a16b0cab0eacda603a705ba21c50063b38979e063f359bdb25d06bf8f4436535fc3a34dfa690c4b871a22456b5e55d1d644474af519f6553778d8647ac36a5f589005ec677a5d6cf1aa73f4155c8f1fffeaad457a0641b8e768a951813074419d1ed8e0f6ce2a9465db4e85d368c9450f0362ead9bb3a6775f8a197d94998eef5bf138ce54606eb9eec0a"], 0xfffffffffffffefa) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r5) ioctl$TUNGETDEVNETNS(r5, 0xc0182101, 0x21000000) syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r6) ioctl$TUNGETDEVNETNS(r6, 0xc0182101, 0x21000000) execveat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x1000) [ 268.127538][T11368] team0: Port device team_slave_1 added [ 268.199392][T11369] team0: Port device team_slave_0 added [ 268.220051][T11370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.245314][T11369] team0: Port device team_slave_1 added [ 268.257969][T11370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.308397][T11368] device hsr_slave_0 entered promiscuous mode [ 268.356208][T11368] device hsr_slave_1 entered promiscuous mode [ 268.395530][T11368] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.475842][T11370] team0: Port device team_slave_0 added [ 268.485629][T11370] team0: Port device team_slave_1 added [ 268.528481][T11369] device hsr_slave_0 entered promiscuous mode [ 268.575232][ T1227] Bluetooth: Error in BCSP hdr checksum [ 268.575323][T11369] device hsr_slave_1 entered promiscuous mode [ 268.595603][ T337] Bluetooth: Error in BCSP hdr checksum [ 268.633858][T11369] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.738881][T11370] device hsr_slave_0 entered promiscuous mode [ 268.794404][T11370] device hsr_slave_1 entered promiscuous mode [ 268.834049][T11370] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.834599][ T1227] Bluetooth: Error in BCSP hdr checksum [ 268.856040][ T961] Bluetooth: Error in BCSP hdr checksum [ 268.982941][T11368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.042831][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.052008][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.073123][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.090593][T11368] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.109153][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.118681][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.128801][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.136073][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.148165][ T1227] Bluetooth: Error in BCSP hdr checksum [ 269.156863][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.191876][T11370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.200490][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.210550][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.219474][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.226766][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.235197][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.245132][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.253713][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.266885][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.308583][T11370] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.361531][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.371636][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.381857][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.391319][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.399988][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.408610][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.418433][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.428078][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.437520][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.446623][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.453954][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.462383][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.471683][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.480937][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.490252][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.515037][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.667722][T11369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.678947][T11369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.699205][T11368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.709504][ T1227] Bluetooth: Error in BCSP hdr checksum [ 269.724699][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.734327][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.743787][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.753291][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.762471][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.769726][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.778259][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.787789][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.796861][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.804101][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.812568][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.822091][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.831183][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.838437][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.846994][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.856951][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.866989][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.876931][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.886596][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.896692][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.906665][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.916321][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.926582][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.935836][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.945521][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.954752][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.964903][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.975073][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.008760][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.018082][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.027272][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.035847][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.044943][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.054341][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.063455][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.072719][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.087319][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.089383][ T1227] Bluetooth: Error in BCSP hdr checksum [ 270.153308][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.292770][T11370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.325372][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 270.331691][T11391] Bluetooth: hci0: sending frame failed (-49) [ 270.347412][ T548] Bluetooth: Error in BCSP hdr checksum [ 270.425033][ T17] Bluetooth: hci1: command 0x1003 tx timeout [ 270.436180][ T1227] Bluetooth: Error in BCSP hdr checksum 19:21:05 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000540)='ramfs\x00', 0x1801001, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ftruncate(r0, 0x208200) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='nsfs\x00', 0x8000, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) [ 270.696954][ T1227] Bluetooth: Error in BCSP hdr checksum 19:21:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}}], 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x100000001) r2 = dup(r1) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="4626409b1c9e12483f7c1db731730e60fa8782735d5e923b3900bccd6702ec39d1fcc62de06455bb0b47afa063e2eb83923a230f6925f62f5cde2bf24d4070ed27ede0401dceacc009b191a55551d4e4e3b288fa8dbf63c4409904acba2d7b3761f194207150d7eddf3c769240553d0c56018bb730e2d77fcfc37075daf6dea94c7b45f7a872433e3b4875efd88e6a8af5116bd5caaed47b3e986d2714039d1734f09550f33e7a5f5b8c764b3078bd175287dfaa47025e33ad24c799b9e36728ef9f855c440e515e7b6779bf4f34f7d510ab6800fa8410a1c2", 0xd9}, {&(0x7f0000000200)="5f57863c396e91aa0fff917950314b269e12ff5bcb57ea91a04cdbde2b35fe6f62336696fa14dbcf035fbd2d6f37fd436f3e1ae42ac019e2e7174bab241ee018c86c09536201bf122f56df988c9758895b601a792e18f3a717623cd0837d55fb260062c97f2d04d101240c11ea9561713fa35f0296497bed0d388918b1bef28c939d42f0387c925b4344f1725754bfa00e3db5d1d16ad71db482e85945bd44770c8f5bf09ae2db532c5e6adadeab4dbe02a47224c277e86ad8ee14d52c3b467ae7cae780b5fb4afba5dc3041b2dad2f9e025bfffbf784bc33a14987e30c8", 0xde}, {&(0x7f0000000300)="3c220941369af3f87ca5e044b422d0a71f145732618bd29d27f6422ce94392501bed48cf3e9370dd03e58ff4a6", 0x2d}], 0x3, &(0x7f0000000380)="ba066d267d048c781c8a84b6abdc09fab7ac2ffd71c8605b389003bec5af535d67710b8d", 0x24, 0x800}, 0x20000040) 19:21:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r2) ioctl$TUNGETDEVNETNS(r2, 0xc0182101, 0x21000000) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000000)={'bond0\x00', 0x1000}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r5, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xfffffffffffffe5b) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 270.969067][ T1227] Bluetooth: Error in BCSP hdr checksum [ 271.223958][ T1227] Bluetooth: Error in BCSP hdr checksum 19:21:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="66b8b9000f00d0c7442400b7fe0000c744240250260000c7442406000000000f011c243e360fc7bd511d7b21660f3834860a000000c4c291ac7c2c003e3e0f79970c00000066baf80cb8caae098cef66bafc0cecc6f84c0f32c4e1795b890a3e3ac1", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:21:06 executing program 5: r0 = socket$inet(0x2, 0x800, 0x80) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x4, 0x5, 0x3f, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xfffffffd}, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x81, 0x4142) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, [0x1800000000, 0x1f, 0x2, 0x7fffffff]}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000300)={r4, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000740)={0x9c, 0x0, &(0x7f0000000600)=[@exit_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x2, 0x30}, @fda={0x66646185, 0x3, 0x2, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/212, 0xd4, 0x0, 0x3d}}, &(0x7f00000004c0)={0x0, 0x20, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/8, 0x8, 0x1, 0x15}, @flat, @flat=@weak_handle={0x77682a85, 0x309, 0x2}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}, 0x1c20}], 0x73, 0x0, &(0x7f00000006c0)="c6068a0548fedb5fcb19048e3d889483cd226f9c0f2b957e3f51e85043db9f40a137616e37d197c5f6d78cd80dcfce9e398e39728ac53f6b6311f3362cade981192b59a2c2035dae01fea9b95a7971fe448dd5386e31699fea1b4f5ae7b1276196b47ee57bf4ca7891156e86bd3e315da8b60d"}) r5 = syz_open_dev$amidi(&(0x7f0000000780)='/dev/amidi#\x00', 0xffffffff, 0x8200) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000007c0)={'ip6tnl0\x00', 0x1000}) exit_group(0x8b6) r6 = syz_open_dev$usb(&(0x7f0000000800)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000840)={0x80}, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x44800, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000008c0)={0x3ce, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}}, 0x88) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000980)) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r8, 0xc058534b, &(0x7f0000000a00)={0x7, 0x101, 0x6, 0x1, 0x7, 0xca5f}) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/qat_adf_ctl\x00', 0x1c042, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000000ac0)={'veth1_to_bridge\x00', {0x2, 0x4e20, @remote}}) r11 = semget(0x0, 0x3927d8c3b7074ab3, 0x8) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000b00)=""/36) r12 = syz_open_dev$midi(&(0x7f0000000b40)='/dev/midi#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000bc0)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r13 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000c00)={0x28, 0x0, 0x2711}, 0x10, 0x0) accept(r13, &(0x7f0000000c40)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000cc0)=0x80) 19:21:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) ioctl$TUNGETDEVNETNS(r0, 0xc0182101, 0x21000000) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r2, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="4300000020362d09006490be6466d04adf46a597df4c6f6f9cfdd3f194d5df1bd8fca376fdd0b98f68a593dba9dc97914c451c7bcd525ea02e70865f439c198a7824195d000000"], &(0x7f00000000c0)=0x4b) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x2}, &(0x7f0000000140)=0x8) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r4) ioctl$TUNGETDEVNETNS(r4, 0xc0182101, 0x21000000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x3, r6, 0x12, 0x1, @in6={0xa, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, [], 0x2a}, 0x8665}}}, 0xa0) r7 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r7, 0x84, 0x9, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x104) [ 271.474495][ T337] Bluetooth: Error in BCSP hdr checksum 19:21:06 executing program 4: 19:21:06 executing program 4: 19:21:06 executing program 4: [ 271.734916][ T337] Bluetooth: Error in BCSP hdr checksum 19:21:06 executing program 4: 19:21:07 executing program 4: [ 271.995987][ T337] Bluetooth: Error in BCSP hdr checksum [ 272.093572][T11446] IPVS: ftp: loaded support on port[0] = 21 [ 272.194334][T11446] chnl_net:caif_netlink_parms(): no params data found [ 272.236099][T11446] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.243232][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.251752][T11446] device bridge_slave_0 entered promiscuous mode [ 272.254628][ T337] Bluetooth: Error in BCSP hdr checksum [ 272.261386][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.271074][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.281468][T11446] device bridge_slave_1 entered promiscuous mode [ 272.308849][T11446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.320632][T11446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.348598][T11446] team0: Port device team_slave_0 added [ 272.356560][T11446] team0: Port device team_slave_1 added [ 272.404595][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 272.410826][T11417] Bluetooth: hci0: sending frame failed (-49) [ 272.428702][T11446] device hsr_slave_0 entered promiscuous mode [ 272.464809][T11446] device hsr_slave_1 entered promiscuous mode [ 272.485603][ T17] Bluetooth: hci1: command 0x1001 tx timeout [ 272.492133][ T337] Bluetooth: Error in BCSP hdr checksum [ 272.504249][T11446] debugfs: Directory 'hsr0' with parent '/' already present! [ 272.524761][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.531914][T11446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.539595][T11446] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.546811][T11446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.603459][T11446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.620488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.630011][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.638594][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.648598][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 272.664198][T11446] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.677601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.686570][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.693835][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.707932][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.716880][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.724191][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.744482][ T961] Bluetooth: Error in BCSP hdr checksum [ 272.750389][ T961] Bluetooth: Error in BCSP hdr checksum [ 272.752927][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.767840][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.791004][T11446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.801881][T11446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.818550][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.827515][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.837021][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.847098][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.875515][T11446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.004604][ T337] Bluetooth: Error in BCSP hdr checksum [ 273.010274][ T337] Bluetooth: Error in BCSP hdr checksum [ 273.044410][ T17] Bluetooth: hci2: command 0x1003 tx timeout [ 273.050622][T11417] Bluetooth: hci2: sending frame failed (-49) [ 273.264146][ T1227] Bluetooth: Error in BCSP hdr checksum [ 273.269789][ T1227] Bluetooth: Error in BCSP hdr checksum [ 273.525011][ T1227] Bluetooth: Error in BCSP hdr checksum [ 273.530686][ T1227] Bluetooth: Error in BCSP hdr checksum [ 273.784416][ T337] Bluetooth: Error in BCSP hdr checksum [ 273.790412][ T337] Bluetooth: Error in BCSP hdr checksum [ 274.044896][ T1227] Bluetooth: Error in BCSP hdr checksum [ 274.050609][ T1227] Bluetooth: Error in BCSP hdr checksum [ 274.304492][ T961] Bluetooth: Error in BCSP hdr checksum [ 274.310158][ T961] Bluetooth: Error in BCSP hdr checksum [ 274.483985][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 274.564563][ T17] Bluetooth: hci1: command 0x1009 tx timeout [ 274.571045][ T1227] Bluetooth: Error in BCSP hdr checksum [ 274.576924][ T1227] Bluetooth: Error in BCSP hdr checksum [ 274.824380][ T1227] Bluetooth: Error in BCSP hdr checksum [ 274.830047][ T1227] Bluetooth: Error in BCSP hdr checksum [ 275.084371][ T337] Bluetooth: Error in BCSP hdr checksum [ 275.090614][ T337] Bluetooth: Error in BCSP hdr checksum [ 275.124972][ T5] Bluetooth: hci2: command 0x1001 tx timeout [ 275.131240][T11417] Bluetooth: hci2: sending frame failed (-49) [ 275.344181][ T1227] Bluetooth: Error in BCSP hdr checksum [ 275.349983][ T1227] Bluetooth: Error in BCSP hdr checksum [ 275.605716][ T961] Bluetooth: Error in BCSP hdr checksum [ 275.611387][ T961] Bluetooth: Error in BCSP hdr checksum [ 275.864354][ T961] Bluetooth: Error in BCSP hdr checksum [ 275.870021][ T961] Bluetooth: Error in BCSP hdr checksum [ 276.124404][ T961] Bluetooth: Error in BCSP hdr checksum [ 276.130076][ T961] Bluetooth: Error in BCSP hdr checksum [ 276.384367][ T1227] Bluetooth: Error in BCSP hdr checksum [ 276.390032][ T1227] Bluetooth: Error in BCSP hdr checksum [ 276.645584][ T337] Bluetooth: Error in BCSP hdr checksum [ 276.651290][ T337] Bluetooth: Error in BCSP hdr checksum [ 276.904476][ T337] Bluetooth: Error in BCSP hdr checksum [ 276.910150][ T337] Bluetooth: Error in BCSP hdr checksum [ 277.164381][ T1227] Bluetooth: Error in BCSP hdr checksum [ 277.170082][ T1227] Bluetooth: Error in BCSP hdr checksum [ 277.203904][ T17] Bluetooth: hci2: command 0x1009 tx timeout [ 277.424390][ T1227] Bluetooth: Error in BCSP hdr checksum [ 277.430058][ T1227] Bluetooth: Error in BCSP hdr checksum [ 277.684346][ T1227] Bluetooth: Error in BCSP hdr checksum [ 277.690015][ T1227] Bluetooth: Error in BCSP hdr checksum [ 277.944347][ T1227] Bluetooth: Error in BCSP hdr checksum [ 277.950020][ T1227] Bluetooth: Error in BCSP hdr checksum [ 278.204422][ T1227] Bluetooth: Error in BCSP hdr checksum [ 278.210120][ T1227] Bluetooth: Error in BCSP hdr checksum [ 278.464172][ T961] Bluetooth: Error in BCSP hdr checksum [ 278.469834][ T961] Bluetooth: Error in BCSP hdr checksum [ 278.724798][ T961] Bluetooth: Error in BCSP hdr checksum [ 278.730628][ T961] Bluetooth: Error in BCSP hdr checksum [ 278.856483][ T5280] ================================================================== [ 278.864656][ T5280] BUG: KMSAN: uninit-value in __skb_try_recv_from_queue+0x8b1/0xe00 [ 278.872746][ T5280] CPU: 1 PID: 5280 Comm: udevd Not tainted 5.3.0-rc7+ #0 [ 278.879781][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.889845][ T5280] Call Trace: [ 278.893205][ T5280] dump_stack+0x191/0x1f0 [ 278.897539][ T5280] kmsan_report+0x162/0x2d0 [ 278.902023][ T5280] __msan_warning+0x75/0xe0 [ 278.906519][ T5280] __skb_try_recv_from_queue+0x8b1/0xe00 [ 278.912153][ T5280] __skb_try_recv_datagram+0x2bd/0x6b0 [ 278.917616][ T5280] skb_recv_datagram+0x227/0x450 [ 278.922600][ T5280] netlink_recvmsg+0x178/0x18e0 [ 278.927542][ T5280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 278.933448][ T5280] sock_recvmsg+0x3b3/0x3c0 [ 278.937948][ T5280] ? netlink_sendmsg+0x1330/0x1330 [ 278.943090][ T5280] ___sys_recvmsg+0x461/0x11e0 [ 278.947859][ T5280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 278.953753][ T5280] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 278.959809][ T5280] ? __fget_light+0x1b8/0x710 [ 278.964469][ T5280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 278.970340][ T5280] __se_sys_recvmsg+0x2fa/0x450 [ 278.975627][ T5280] __x64_sys_recvmsg+0x4a/0x70 [ 278.980382][ T5280] do_syscall_64+0xbc/0xf0 [ 278.984807][ T5280] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 278.990689][ T5280] RIP: 0033:0x7f0597ba4210 [ 278.995087][ T5280] Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 [ 279.014670][ T5280] RSP: 002b:00007ffd4467c958 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 279.023166][ T5280] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0597ba4210 [ 279.031116][ T5280] RDX: 0000000000000000 RSI: 00007ffd4467c9c0 RDI: 0000000000000004 [ 279.039074][ T5280] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 279.047029][ T5280] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffd4467ca20 [ 279.054982][ T5280] R13: 0000000000000000 R14: 00000000009e62d0 R15: 00000000009e6250 [ 279.062942][ T5280] [ 279.065257][ T5280] Uninit was created at: [ 279.069479][ T5280] kmsan_internal_poison_shadow+0x58/0xb0 [ 279.075173][ T5280] kmsan_slab_free+0x8d/0x100 [ 279.079828][ T5280] kmem_cache_free+0x2d1/0x2b70 [ 279.084668][ T5280] kfree_skb+0x473/0x4c0 [ 279.088966][ T5280] bcsp_close+0x127/0x1e0 [ 279.093303][ T5280] hci_uart_tty_close+0x385/0x410 [ 279.098322][ T5280] tty_ldisc_release+0x5dd/0xdb0 [ 279.103282][ T5280] tty_release_struct+0x4f/0x1d0 [ 279.108210][ T5280] tty_release+0x1be2/0x1e80 [ 279.112777][ T5280] __fput+0x4c9/0xba0 [ 279.116737][ T5280] ____fput+0x37/0x40 [ 279.120693][ T5280] task_work_run+0x22e/0x2a0 [ 279.125360][ T5280] do_exit+0xf29/0x3aa0 [ 279.129512][ T5280] do_group_exit+0x18a/0x320 [ 279.134170][ T5280] get_signal+0xbf6/0x32f0 [ 279.138665][ T5280] do_signal+0x6f/0xe10 [ 279.142799][ T5280] prepare_exit_to_usermode+0x2c5/0x4d0 [ 279.148325][ T5280] syscall_return_slowpath+0x90/0x610 [ 279.153688][ T5280] do_syscall_64+0xe2/0xf0 [ 279.158092][ T5280] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.163956][ T5280] ================================================================== [ 279.172006][ T5280] Disabling lock debugging due to kernel taint [ 279.178140][ T5280] Kernel panic - not syncing: panic_on_warn set ... [ 279.185070][ T5280] CPU: 1 PID: 5280 Comm: udevd Tainted: G B 5.3.0-rc7+ #0 [ 279.193667][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.203717][ T5280] Call Trace: [ 279.207452][ T5280] dump_stack+0x191/0x1f0 [ 279.211773][ T5280] panic+0x3c9/0xc1e [ 279.215666][ T5280] kmsan_report+0x2ca/0x2d0 [ 279.220151][ T5280] __msan_warning+0x75/0xe0 [ 279.224729][ T5280] __skb_try_recv_from_queue+0x8b1/0xe00 [ 279.230349][ T5280] __skb_try_recv_datagram+0x2bd/0x6b0 [ 279.235816][ T5280] skb_recv_datagram+0x227/0x450 [ 279.240748][ T5280] netlink_recvmsg+0x178/0x18e0 [ 279.245588][ T5280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 279.251461][ T5280] sock_recvmsg+0x3b3/0x3c0 [ 279.255952][ T5280] ? netlink_sendmsg+0x1330/0x1330 [ 279.261052][ T5280] ___sys_recvmsg+0x461/0x11e0 [ 279.265817][ T5280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 279.271692][ T5280] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 279.277742][ T5280] ? __fget_light+0x1b8/0x710 [ 279.282406][ T5280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 279.288282][ T5280] __se_sys_recvmsg+0x2fa/0x450 [ 279.293120][ T5280] __x64_sys_recvmsg+0x4a/0x70 [ 279.297868][ T5280] do_syscall_64+0xbc/0xf0 [ 279.302274][ T5280] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.308240][ T5280] RIP: 0033:0x7f0597ba4210 [ 279.312636][ T5280] Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 [ 279.332219][ T5280] RSP: 002b:00007ffd4467c958 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 279.340611][ T5280] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0597ba4210 [ 279.348588][ T5280] RDX: 0000000000000000 RSI: 00007ffd4467c9c0 RDI: 0000000000000004 [ 279.356550][ T5280] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 279.364501][ T5280] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffd4467ca20 [ 279.372451][ T5280] R13: 0000000000000000 R14: 00000000009e62d0 R15: 00000000009e6250 [ 279.381838][ T5280] Kernel Offset: disabled [ 279.386171][ T5280] Rebooting in 86400 seconds..