[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. 2020/05/23 18:26:03 fuzzer started 2020/05/23 18:26:03 dialing manager at 10.128.0.26:38661 2020/05/23 18:26:04 syscalls: 3055 2020/05/23 18:26:04 code coverage: enabled 2020/05/23 18:26:04 comparison tracing: enabled 2020/05/23 18:26:04 extra coverage: enabled 2020/05/23 18:26:04 setuid sandbox: enabled 2020/05/23 18:26:04 namespace sandbox: enabled 2020/05/23 18:26:04 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 18:26:04 fault injection: enabled 2020/05/23 18:26:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 18:26:04 net packet injection: enabled 2020/05/23 18:26:04 net device setup: enabled 2020/05/23 18:26:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 18:26:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 18:26:04 USB emulation: enabled 18:28:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/233) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x7ffff000) syzkaller login: [ 197.730024][ T6799] IPVS: ftp: loaded support on port[0] = 21 18:28:20 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005f00)=ANY=[@ANYBLOB="58010000100013070000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000014000000009728000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000219aeb45000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf10000200000000000000000000000000000000000000000000000000000ffffffffffffffdd0000000000000000000000000020000000ff010000000200000000000000000000006000020063626328646573335f6564652900000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000c0"], 0x158}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0x8f, 0x0) [ 197.867990][ T6799] chnl_net:caif_netlink_parms(): no params data found [ 197.987486][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.996010][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.007112][ T6799] device bridge_slave_0 entered promiscuous mode [ 198.017907][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.027622][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.036777][ T6799] device bridge_slave_1 entered promiscuous mode [ 198.069717][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.100218][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.121186][ T6937] IPVS: ftp: loaded support on port[0] = 21 18:28:21 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @const={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x39, 0xd8, 0x8}, 0x20) [ 198.159697][ T6799] team0: Port device team_slave_0 added [ 198.186255][ T6799] team0: Port device team_slave_1 added [ 198.267453][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.276806][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.305122][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.330086][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.338039][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.366251][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 18:28:21 executing program 3: unshare(0x40000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) [ 198.518013][ T6799] device hsr_slave_0 entered promiscuous mode [ 198.592775][ T6799] device hsr_slave_1 entered promiscuous mode [ 198.745720][ T7028] IPVS: ftp: loaded support on port[0] = 21 [ 198.753617][ T6988] IPVS: ftp: loaded support on port[0] = 21 [ 198.824460][ T6937] chnl_net:caif_netlink_parms(): no params data found 18:28:22 executing program 4: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x16) [ 199.200141][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.209218][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.245293][ T6937] device bridge_slave_0 entered promiscuous mode [ 199.256776][ T6988] chnl_net:caif_netlink_parms(): no params data found [ 199.288462][ T7256] IPVS: ftp: loaded support on port[0] = 21 [ 199.334342][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.341539][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.352960][ T6937] device bridge_slave_1 entered promiscuous mode 18:28:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) [ 199.479517][ T7028] chnl_net:caif_netlink_parms(): no params data found [ 199.505837][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.516488][ T6799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.585967][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.607851][ T6799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.715318][ T6799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.747971][ T6799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.808298][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.815912][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.824650][ T6988] device bridge_slave_0 entered promiscuous mode [ 199.838664][ T6937] team0: Port device team_slave_0 added [ 199.849032][ T6937] team0: Port device team_slave_1 added [ 199.856540][ T7374] IPVS: ftp: loaded support on port[0] = 21 [ 199.870111][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.878526][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.887661][ T6988] device bridge_slave_1 entered promiscuous mode [ 199.930740][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.954794][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.961770][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.988872][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.002956][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.046993][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.054457][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.081941][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.101110][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.109899][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.118997][ T7028] device bridge_slave_0 entered promiscuous mode [ 200.128131][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.136648][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.144958][ T7028] device bridge_slave_1 entered promiscuous mode [ 200.237171][ T6937] device hsr_slave_0 entered promiscuous mode [ 200.273019][ T6937] device hsr_slave_1 entered promiscuous mode [ 200.312573][ T6937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.320452][ T6937] Cannot create hsr debugfs directory [ 200.329551][ T6988] team0: Port device team_slave_0 added [ 200.341503][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.357855][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.375135][ T6988] team0: Port device team_slave_1 added [ 200.406136][ T7028] team0: Port device team_slave_0 added [ 200.454667][ T7028] team0: Port device team_slave_1 added [ 200.470171][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.478595][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.508817][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.522905][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.529875][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.556330][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.619004][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.626918][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.654659][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.735193][ T6988] device hsr_slave_0 entered promiscuous mode [ 200.782885][ T6988] device hsr_slave_1 entered promiscuous mode [ 200.842297][ T6988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.850050][ T6988] Cannot create hsr debugfs directory [ 200.859114][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.866442][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.892862][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.914833][ T7256] chnl_net:caif_netlink_parms(): no params data found [ 201.056547][ T7028] device hsr_slave_0 entered promiscuous mode [ 201.092543][ T7028] device hsr_slave_1 entered promiscuous mode [ 201.152223][ T7028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.159814][ T7028] Cannot create hsr debugfs directory [ 201.253216][ T7374] chnl_net:caif_netlink_parms(): no params data found [ 201.415640][ T6937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.458075][ T6937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.550127][ T6937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.667186][ T6937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.775001][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.783079][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.791061][ T7256] device bridge_slave_0 entered promiscuous mode [ 201.799912][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.807969][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.816396][ T7374] device bridge_slave_0 entered promiscuous mode [ 201.846924][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.854238][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.863426][ T7256] device bridge_slave_1 entered promiscuous mode [ 201.873383][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.880516][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.890101][ T7374] device bridge_slave_1 entered promiscuous mode [ 201.947019][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.954525][ T6988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.007197][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.021294][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.055114][ T6988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.129949][ T7374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.145649][ T7374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.174947][ T6988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.234221][ T6988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.293867][ T7256] team0: Port device team_slave_0 added [ 202.307590][ T6799] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.319651][ T7374] team0: Port device team_slave_0 added [ 202.328069][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.337978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.361626][ T7256] team0: Port device team_slave_1 added [ 202.394090][ T7374] team0: Port device team_slave_1 added [ 202.418749][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.427303][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.454964][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.467402][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.475432][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.502131][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.516518][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.523914][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.550915][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.563329][ T7028] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.635561][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.643322][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.670503][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.756956][ T7256] device hsr_slave_0 entered promiscuous mode [ 202.812652][ T7256] device hsr_slave_1 entered promiscuous mode [ 202.852256][ T7256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.859947][ T7256] Cannot create hsr debugfs directory [ 202.866591][ T7028] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.917361][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.926366][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.936372][ T2499] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.943745][ T2499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.953399][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.989014][ T7028] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.050578][ T7028] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.125175][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.134680][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.143992][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.151074][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.159842][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.169018][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.219433][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.230762][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.296632][ T7374] device hsr_slave_0 entered promiscuous mode [ 203.372661][ T7374] device hsr_slave_1 entered promiscuous mode [ 203.422200][ T7374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.429809][ T7374] Cannot create hsr debugfs directory [ 203.469912][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.478993][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.488746][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.498543][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.507467][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.575695][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.586953][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.600888][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.632408][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.703926][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.734888][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.743683][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.766727][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.795001][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.809320][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.819923][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.833146][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.841543][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.849147][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.857146][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.866613][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.875329][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.882514][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.936035][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.952249][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.960935][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.971487][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.980993][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.017299][ T6988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.046087][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.054316][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.063742][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.073830][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.083172][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.102287][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.110961][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.121441][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.130708][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.140080][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.149411][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.190579][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.200863][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.216159][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.239556][ T6799] device veth0_vlan entered promiscuous mode [ 204.270465][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.307968][ T6988] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.326775][ T7256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.395149][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.403173][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.410982][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.420234][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.430197][ T6799] device veth1_vlan entered promiscuous mode [ 204.458489][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.467650][ T7256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.534484][ T7256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.603861][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.612889][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.621128][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.631098][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.640767][ T2511] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.647991][ T2511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.656292][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.665809][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.674919][ T2511] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.682182][ T2511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.689818][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.721340][ T7374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.768612][ T7256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.814754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.835098][ T7374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.909740][ T7374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.974499][ T7374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.056689][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.065968][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.074949][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.085018][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.094128][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.103671][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.113138][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.124871][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.133324][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.151720][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.161557][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.210170][ T6799] device veth0_macvtap entered promiscuous mode [ 205.226662][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.237308][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.246472][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.255472][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.264065][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.271215][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.279218][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.288786][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.304289][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.313740][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.328966][ T6988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.341580][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.369507][ T6937] device veth0_vlan entered promiscuous mode [ 205.382956][ T6799] device veth1_macvtap entered promiscuous mode [ 205.392376][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.400420][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.410724][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.419826][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.429729][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.439858][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.447378][ T2335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.456303][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.464863][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.501661][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.511758][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.520988][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.530579][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.541361][ T6937] device veth1_vlan entered promiscuous mode [ 205.561437][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.600561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.609392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.618856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.628367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.637508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.647287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.656442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.666237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.675683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.684754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.700962][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.735410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.743528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.750985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.759471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.768486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.798945][ T6937] device veth0_macvtap entered promiscuous mode [ 205.830929][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.840173][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.853624][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.862885][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.871435][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.884718][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.900184][ T6937] device veth1_macvtap entered promiscuous mode [ 205.914374][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.937073][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.014714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 206.024405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.033581][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.051456][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.075417][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.087393][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.096833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.110124][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 206.122799][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.135144][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.214207][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.226721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.236668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.246567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.255533][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.262741][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.272204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.281102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.290294][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.297704][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.308933][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 206.329089][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.341549][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.358559][ T6988] device veth0_vlan entered promiscuous mode [ 206.459875][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.469433][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.483218][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.490916][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.500321][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.519844][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.542814][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.551285][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.568186][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.578770][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.595817][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.610327][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.626145][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.660003][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.692546][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.702712][ T6988] device veth1_vlan entered promiscuous mode [ 206.750292][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.759281][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.769266][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.778496][ T2511] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.785888][ T2511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.794419][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.803883][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.812833][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.821641][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.831282][ T2511] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.838437][ T2511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.846822][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.856065][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.864944][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.873588][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.888275][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.896450][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.905033][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.982617][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.991031][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.003410][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.026242][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.138768][ T6988] device veth0_macvtap entered promiscuous mode [ 207.197158][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.197452][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.229177][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.246043][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.259062][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.273380][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.283168][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.296511][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.328771][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.342256][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.349922][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.369444][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.378502][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 18:28:30 executing program 0: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup(0xffffffffffffffff) socket(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/213, 0xd5) read(r1, &(0x7f0000000300)=""/30, 0x1e) [ 207.407728][ T7374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.474181][ T7374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.511207][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 18:28:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') pidfd_open(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8, @ipv4={[], [], @local}, 0x9}, {0xa, 0x4e22, 0x1, @mcast2, 0x3}, r5, 0x3ff}}, 0x48) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x4000000000dc) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd29, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x4c}}, 0x88d0) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) pidfd_open(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0xffff996a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) [ 207.520800][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.543522][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.560152][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.583038][ T6988] device veth1_macvtap entered promiscuous mode [ 207.596450][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.721910][ C0] hrtimer: interrupt took 69138 ns [ 207.748530][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.778316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.793276][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:28:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') pidfd_open(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8, @ipv4={[], [], @local}, 0x9}, {0xa, 0x4e22, 0x1, @mcast2, 0x3}, r5, 0x3ff}}, 0x48) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0), 0x4000000000dc) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd29, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x4c}}, 0x88d0) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) pidfd_open(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0xffff996a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) [ 207.826586][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.851681][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.889784][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 207.910854][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.930375][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 207.957474][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.977539][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.001192][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.023833][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.039633][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:28:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 208.079418][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.097970][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.119471][ T7028] device veth0_vlan entered promiscuous mode [ 208.143400][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.164831][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.176950][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.189043][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.213107][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.241578][ T7028] device veth1_vlan entered promiscuous mode [ 208.256667][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.273633][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.305426][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:28:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1, 0x0) 18:28:31 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9, 0x0, 0x0, 0x0, 0x81, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x7f) socket(0x2, 0x803, 0xff) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xc0, 0x0, 0x800, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x202}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5a, 0xbe, "829e58872d9611e08cad366d8a8564b15b80dbd49d0b1347435a9d02ccc936cb5cc418d22204aa5e44841cf3f63192a2ceadcfd22381d9a794e56eb11edca22f22a14f98dc216a9feca7f87a033122623a0a3937fbb5"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x7}}, @NL80211_ATTR_MESH_PEER_AID={0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) [ 208.403649][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.423440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.444455][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.538430][ T7256] device veth0_vlan entered promiscuous mode 18:28:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0xa6, 0x0) [ 208.605400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.625056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.756914][ T7256] device veth1_vlan entered promiscuous mode [ 208.800724][ T7028] device veth0_macvtap entered promiscuous mode [ 208.878050][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.898534][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:28:32 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @const={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x39, 0xd8, 0x8}, 0x20) [ 208.951164][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 18:28:32 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @const={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x39, 0xd8, 0x8}, 0x20) [ 209.018569][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.051018][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.066155][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.078992][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.124895][ T7028] device veth1_macvtap entered promiscuous mode [ 209.240127][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.327834][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.339895][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.357153][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.377029][ T2511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.406077][ T7256] device veth0_macvtap entered promiscuous mode [ 209.420980][ T7374] device veth0_vlan entered promiscuous mode [ 209.441662][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.459761][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.483196][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.500171][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.517643][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.539967][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.568886][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.582291][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.590598][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.600229][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.609943][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.619481][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.633939][ T7256] device veth1_macvtap entered promiscuous mode [ 209.651761][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.663972][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.677965][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.688703][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.698704][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.709875][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.722373][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.743551][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.752091][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.760827][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.791141][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.806211][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.816500][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.827361][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.838312][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.849360][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.860102][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.873588][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.890417][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.913876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.923544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.936570][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.948208][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.958618][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.970044][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.980125][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.992499][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.002616][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.013225][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.025722][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.043787][ T7374] device veth1_vlan entered promiscuous mode [ 210.054900][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.064712][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.194474][ T0] NOHZ: local_softirq_pending 08 [ 210.327006][ T8146] IPVS: ftp: loaded support on port[0] = 21 [ 210.360867][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.377437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.478608][ T7374] device veth0_macvtap entered promiscuous mode [ 210.498437][ T7374] device veth1_macvtap entered promiscuous mode [ 210.566891][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.571315][ T8146] IPVS: ftp: loaded support on port[0] = 21 [ 210.578514][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.607503][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.621313][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.636815][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.648312][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.663575][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.676438][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.686390][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.696898][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.708691][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.718427][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.727334][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.736821][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.747212][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.762502][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.774706][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.786978][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.797620][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.807653][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.818334][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.829523][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.840087][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.850954][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.861527][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.873624][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.889498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.899387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:28:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x280, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$midi(r0, &(0x7f0000000080)=""/169, 0xa9) 18:28:35 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 18:28:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$midi(r0, &(0x7f0000000080)=""/169, 0xa9) 18:28:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @const={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x39, 0xd8, 0x8}, 0x20) 18:28:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9, 0x0, 0x0, 0x0, 0x81, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x7f) socket(0x2, 0x803, 0xff) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xd0, 0x0, 0x800, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_VLAN_ID={0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7a, 0xbe, "829e58872d9611e08cad366d8a8564b15b80dbd49d0b1347435a9d02ccc936cb5cc418d22204aa5e44841cf3f63192a2ceadcfd22381d9a794e56eb11edca22f22a14f98dc216a9feca7f87a033122623a0a3937fbb5303670e8404a2e66b1e66d47bc389a9b24dff63f54543cc89f1bc2527cc5d3c2"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x7}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x23a}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) 18:28:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 18:28:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 18:28:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$midi(r0, &(0x7f0000000080)=""/169, 0xa9) [ 212.552131][ T843] tipc: TX() has been purged, node left! 18:28:35 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x73) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x101, 0x33c) sendmmsg$inet6(r0, &(0x7f00000032c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x7, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000000000000000000ff2b198f2956863b97dca55af9cfd63035bc966548b4027b1f8edd7452ee1890271098157da87f1df0ce5f502f3c3ef4be5aca48aa1baaaa3a46b1d473ed5e71d02bfc22193bf7b5749f25adcd442befb0c26aaf2fc749e631697405067b5e4aea2ac8ff"], 0x18}}, {{&(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0) 18:28:35 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9, 0x0, 0x0, 0x0, 0x81, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x7f) socket(0x2, 0x803, 0xff) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 18:28:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x1) 18:28:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 18:28:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="620af8ff02000021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000054000000b70000000000000095000000000000003faf4f2aa3d9b18ed8a25312a2e2c49e80a32e8cf1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e906f2d08002d75593a286cecc93e6427c95aa0b784625704f07a72c2918451ebdcf4cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec28b48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364141215106bf04f658333719acd97cfa107d40224edc5465a932b77e74e80220d42bc6099ad230a198802a778be00000000006ef6c1ff7224ac913f33f5fdc63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d17cf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de091a9c8452a823ebdc66be057c273a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532af9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62c6faec2fed44da4928b3014bf9b14334e16cb9a6298060d6b2ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a6eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c0200000000000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad897ef3b7cda42013d53046da21b48216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2633398631c7771429d12000000000000000000000000e09fec2271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee581eee52bf1dc7ffc1969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be50c72d978cf06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598522d3e959efc71f66cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3e90e5c708ce65cd6bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86506964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63c96ec8485b3b8a8c9aa3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e95710038ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b681c74cfd4e2351bfb37114bd462e652fc40eed63ac9ef40bb4148a5feabe52341c100378ac8264c0a81b325625b27e9da0482c8be6b00b8209ddfaca25671e25512bbb4559d9b168e460cdd47fd96904aa96544722628b49c7923c91540f738742485486da93f81ea0a420a58f3bab268f874b56b080ae5f3437f948254ac564e6eabde6184bfed90000000000000000006311a52a0bc381f67810ae52c070a85df5b5e1be02"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 18:28:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18:28:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=""/216, 0x0, 0xd8, 0x8}, 0x20) 18:28:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r1, r3) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) [ 213.481656][ T8239] BPF:hdr_len not found 18:28:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=""/216, 0x0, 0xd8, 0x8}, 0x20) 18:28:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x22, {0x22, 0x0, "a4d9b1ce6a1541a5687a7490746f1d096cad3308cb87a01ffe4e83d10600b838"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 213.726605][ T8249] BPF:hdr_len not found 18:28:37 executing program 5: epoll_create1(0x0) timerfd_create(0x0, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 18:28:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9, 0x0, 0x0, 0x0, 0x81, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x7f) socket(0x2, 0x803, 0xff) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 18:28:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=""/216, 0x0, 0xd8, 0x8}, 0x20) 18:28:37 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9, 0x0, 0x0, 0x0, 0x81, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x7f) socket(0x2, 0x803, 0xff) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xd0, 0x0, 0x800, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x202}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6c, 0xbe, "829e58872d9611e08cad366d8a8564b15b80dbd49d0b1347435a9d02ccc936cb5cc418d22204aa5e44841cf3f63192a2ceadcfd22381d9a794e56eb11edca22f22a14f98dc216a9feca7f87a033122623a0a3937fbb5303670e8404a2e66b1e66d47bc389a9b24df"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x7}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x23a}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) [ 214.091936][ T8068] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 214.106412][ T8260] BPF:hdr_len not found 18:28:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x2d, 0xd8, 0x8}, 0x20) [ 214.433659][ T8068] usb 5-1: Using ep0 maxpacket: 8 18:28:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x25, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 18:28:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r1, r3) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 18:28:37 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9, 0x0, 0x0, 0x0, 0x81, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0xe0, 0x0, 0x800, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x202}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7a, 0xbe, "829e58872d9611e08cad366d8a8564b15b80dbd49d0b1347435a9d02ccc936cb5cc418d22204aa5e44841cf3f63192a2ceadcfd22381d9a794e56eb11edca22f22a14f98dc216a9feca7f87a033122623a0a3937fbb5303670e8404a2e66b1e66d47bc389a9b24dff63f54543cc89f1bc2527cc5d3c2"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x7}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x23a}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) [ 214.523344][ T8273] BPF:[1] VAR a._ [ 214.552888][ T8273] BPF:type_id=2 linkage=0 [ 214.572241][ T8068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.579801][ T8273] BPF: 18:28:37 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 214.601544][ T8068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.612872][ T8273] BPF:Invalid type_id [ 214.632189][ T8273] BPF: [ 214.632189][ T8273] [ 214.664986][ T8068] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 18:28:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="7800000024000b0f000000000000040000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100736671004c00020000000000000000000000000000000000000000000000000000000000000000000200000007"], 0x78}}, 0x0) 18:28:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x2d, 0xd8, 0x8}, 0x20) [ 214.754490][ T8068] usb 5-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 214.837798][ T8068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.923862][ T8068] usb 5-1: config 0 descriptor?? [ 214.941787][ T8290] BPF:[1] VAR a._ [ 214.972443][ T8290] BPF:type_id=2 linkage=0 [ 215.011864][ T8290] BPF: [ 215.015613][ T8290] BPF:Invalid type_id [ 215.020184][ T8290] BPF: [ 215.020184][ T8290] [ 215.427200][ T8068] wacom 0003:056A:0003.0001: unknown main item tag 0x2 [ 215.461266][ T8068] wacom 0003:056A:0003.0001: unknown main item tag 0x4 [ 215.520575][ T8068] wacom 0003:056A:0003.0001: unknown main item tag 0x3 [ 215.611861][ T8068] wacom 0003:056A:0003.0001: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 215.661922][ T8068] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0003.0001/input/input5 [ 215.699228][ T8068] wacom 0003:056A:0003.0001: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.4-1/input0 [ 215.792086][ T8068] usb 5-1: USB disconnect, device number 2 [ 215.830175][ T8068] ================================================================== [ 215.838591][ T8068] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 215.845793][ T8068] Read of size 8 at addr ffff8880a8a32150 by task kworker/1:5/8068 [ 215.853973][ T8068] [ 215.856317][ T8068] CPU: 1 PID: 8068 Comm: kworker/1:5 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 215.865977][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.876063][ T8068] Workqueue: usb_hub_wq hub_event [ 215.881899][ T8068] Call Trace: [ 215.885203][ T8068] dump_stack+0x18f/0x20d [ 215.889548][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 215.894446][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 215.899316][ T8068] print_address_description.constprop.0.cold+0xd3/0x413 [ 215.906359][ T8068] ? cdev_device_del+0x69/0x80 [ 215.911136][ T8068] ? mousedev_destroy+0x20/0xa0 [ 215.916060][ T8068] ? __input_unregister_device+0x1b0/0x430 [ 215.921907][ T8068] ? release_nodes+0x499/0x910 [ 215.926676][ T8068] ? devres_release_group+0x160/0x210 [ 215.932085][ T8068] ? vprintk_func+0x97/0x1a6 [ 215.936695][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 215.941557][ T8068] kasan_report.cold+0x1f/0x37 [ 215.946339][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 215.951543][ T8068] __mutex_lock+0x1033/0x13c0 [ 215.956443][ T8068] ? mousedev_cleanup+0x21/0x180 [ 215.961578][ T8068] ? print_usage_bug+0x240/0x240 [ 215.966967][ T8068] ? trace_hardirqs_off+0x50/0x220 [ 215.972095][ T8068] ? mutex_trylock+0x2c0/0x2c0 [ 215.976878][ T8068] ? mark_held_locks+0x9f/0xe0 [ 215.984210][ T8068] ? kfree+0x1eb/0x2b0 [ 215.988483][ T8068] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 215.994494][ T8068] ? kfree_const+0x51/0x60 [ 215.999073][ T8068] ? mousedev_cleanup+0x21/0x180 [ 216.004047][ T8068] mousedev_cleanup+0x21/0x180 [ 216.008843][ T8068] mousedev_destroy+0x28/0xa0 [ 216.013619][ T8068] __input_unregister_device+0x1b0/0x430 [ 216.019269][ T8068] release_nodes+0x499/0x910 [ 216.023876][ T8068] ? devres_remove_group+0x440/0x440 [ 216.029292][ T8068] devres_release_group+0x160/0x210 [ 216.034531][ T8068] wacom_remove+0x244/0x3b0 [ 216.039067][ T8068] hid_device_remove+0xed/0x240 [ 216.043927][ T8068] ? wacom_close+0x80/0x80 [ 216.048413][ T8068] ? hid_compare_device_paths+0xc0/0xc0 [ 216.053970][ T8068] device_release_driver_internal+0x231/0x500 [ 216.060072][ T8068] bus_remove_device+0x2dc/0x4a0 [ 216.065045][ T8068] device_del+0x481/0xd30 [ 216.069390][ T8068] ? device_link_add_missing_supplier_links+0x370/0x370 [ 216.076356][ T8068] ? mark_held_locks+0x9f/0xe0 [ 216.081141][ T8068] ? _raw_spin_unlock_irq+0x1f/0x80 [ 216.086367][ T8068] hid_destroy_device+0xe1/0x150 [ 216.091359][ T8068] usbhid_disconnect+0x9f/0xe0 [ 216.096146][ T8068] usb_unbind_interface+0x1bd/0x8a0 [ 216.101398][ T8068] ? __pm_runtime_idle+0xd1/0x320 [ 216.106619][ T8068] ? usb_autoresume_device+0x60/0x60 [ 216.111930][ T8068] device_release_driver_internal+0x432/0x500 [ 216.118042][ T8068] bus_remove_device+0x2dc/0x4a0 [ 216.123015][ T8068] device_del+0x481/0xd30 [ 216.127460][ T8068] ? device_link_add_missing_supplier_links+0x370/0x370 [ 216.134628][ T8068] ? usb_remove_ep_devs+0x3e/0x80 [ 216.139707][ T8068] ? remove_intf_ep_devs+0x13f/0x1d0 [ 216.145499][ T8068] usb_disable_device+0x211/0x690 [ 216.151275][ T8068] usb_disconnect+0x284/0x8d0 [ 216.156675][ T8068] hub_event+0x17ca/0x38f0 [ 216.161148][ T8068] ? hub_port_debounce+0x260/0x260 [ 216.166373][ T8068] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 216.172291][ T8068] ? debug_smp_processor_id+0x2f/0x185 [ 216.177771][ T8068] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 216.183374][ T8068] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 216.189401][ T8068] process_one_work+0x965/0x16a0 [ 216.196620][ T8068] ? lock_release+0x800/0x800 [ 216.201405][ T8068] ? pwq_dec_nr_in_flight+0x310/0x310 [ 216.206801][ T8068] ? rwlock_bug.part.0+0x90/0x90 [ 216.211764][ T8068] worker_thread+0x7ab/0xe20 [ 216.216395][ T8068] ? process_one_work+0x16a0/0x16a0 [ 216.221607][ T8068] kthread+0x3b5/0x4a0 [ 216.225859][ T8068] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 216.231590][ T8068] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 216.237330][ T8068] ret_from_fork+0x24/0x30 [ 216.241780][ T8068] [ 216.244115][ T8068] Allocated by task 8068: [ 216.248636][ T8068] save_stack+0x1b/0x40 [ 216.253360][ T8068] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 216.259010][ T8068] kmem_cache_alloc_trace+0x153/0x7d0 [ 216.265478][ T8068] mousedev_create+0x90/0xa20 [ 216.270190][ T8068] mousedev_connect+0x20/0x280 [ 216.275074][ T8068] input_attach_handler+0x194/0x200 [ 216.280282][ T8068] input_register_device.cold+0xf5/0x246 [ 216.285931][ T8068] wacom_parse_and_register+0x3936/0x53e0 [ 216.293676][ T8068] wacom_probe+0x96b/0xbc0 [ 216.298109][ T8068] hid_device_probe+0x2be/0x3f0 [ 216.303050][ T8068] really_probe+0x281/0x6d0 [ 216.308867][ T8068] driver_probe_device+0xfe/0x1d0 [ 216.313897][ T8068] __device_attach_driver+0x1c2/0x220 [ 216.319276][ T8068] bus_for_each_drv+0x162/0x1e0 [ 216.324216][ T8068] __device_attach+0x21a/0x360 [ 216.328985][ T8068] bus_probe_device+0x1e4/0x290 [ 216.333838][ T8068] device_add+0xaf1/0x1900 [ 216.338257][ T8068] hid_add_device+0x33c/0x9a0 [ 216.342938][ T8068] usbhid_probe+0xac8/0xff0 [ 216.347452][ T8068] usb_probe_interface+0x305/0x7a0 [ 216.352913][ T8068] really_probe+0x281/0x6d0 [ 216.357425][ T8068] driver_probe_device+0xfe/0x1d0 [ 216.362492][ T8068] __device_attach_driver+0x1c2/0x220 [ 216.367873][ T8068] bus_for_each_drv+0x162/0x1e0 [ 216.376995][ T8068] __device_attach+0x21a/0x360 [ 216.381800][ T8068] bus_probe_device+0x1e4/0x290 [ 216.386655][ T8068] device_add+0xaf1/0x1900 [ 216.391081][ T8068] usb_set_configuration+0xec5/0x1740 [ 216.396460][ T8068] usb_generic_driver_probe+0x9d/0xe0 [ 216.402104][ T8068] usb_probe_device+0xc6/0x1f0 [ 216.406876][ T8068] really_probe+0x281/0x6d0 [ 216.411422][ T8068] driver_probe_device+0xfe/0x1d0 [ 216.416456][ T8068] __device_attach_driver+0x1c2/0x220 [ 216.421845][ T8068] bus_for_each_drv+0x162/0x1e0 [ 216.426783][ T8068] __device_attach+0x21a/0x360 [ 216.431560][ T8068] bus_probe_device+0x1e4/0x290 [ 216.436424][ T8068] device_add+0xaf1/0x1900 [ 216.440892][ T8068] usb_new_device.cold+0x753/0x103d [ 216.446276][ T8068] hub_event+0x1eca/0x38f0 [ 216.450712][ T8068] process_one_work+0x965/0x16a0 [ 216.455663][ T8068] worker_thread+0x96/0xe20 [ 216.460261][ T8068] kthread+0x3b5/0x4a0 [ 216.464341][ T8068] ret_from_fork+0x24/0x30 [ 216.468753][ T8068] [ 216.471084][ T8068] Freed by task 8068: [ 216.475335][ T8068] save_stack+0x1b/0x40 [ 216.479500][ T8068] __kasan_slab_free+0xf7/0x140 [ 216.484360][ T8068] kfree+0x109/0x2b0 [ 216.488271][ T8068] device_release+0x71/0x200 [ 216.492868][ T8068] kobject_put+0x1c8/0x2f0 [ 216.497290][ T8068] cdev_device_del+0x69/0x80 [ 216.501886][ T8068] mousedev_destroy+0x20/0xa0 [ 216.506571][ T8068] __input_unregister_device+0x1b0/0x430 [ 216.512301][ T8068] release_nodes+0x499/0x910 [ 216.516901][ T8068] devres_release_group+0x160/0x210 [ 216.522108][ T8068] wacom_remove+0x244/0x3b0 [ 216.526621][ T8068] hid_device_remove+0xed/0x240 [ 216.531671][ T8068] device_release_driver_internal+0x231/0x500 [ 216.537748][ T8068] bus_remove_device+0x2dc/0x4a0 [ 216.542700][ T8068] device_del+0x481/0xd30 [ 216.547053][ T8068] hid_destroy_device+0xe1/0x150 [ 216.552017][ T8068] usbhid_disconnect+0x9f/0xe0 [ 216.556880][ T8068] usb_unbind_interface+0x1bd/0x8a0 [ 216.562095][ T8068] device_release_driver_internal+0x432/0x500 [ 216.568201][ T8068] bus_remove_device+0x2dc/0x4a0 [ 216.573374][ T8068] device_del+0x481/0xd30 [ 216.577739][ T8068] usb_disable_device+0x211/0x690 [ 216.583423][ T8068] usb_disconnect+0x284/0x8d0 [ 216.588439][ T8068] hub_event+0x17ca/0x38f0 [ 216.593381][ T8068] process_one_work+0x965/0x16a0 [ 216.598419][ T8068] worker_thread+0x7ab/0xe20 [ 216.603020][ T8068] kthread+0x3b5/0x4a0 [ 216.607101][ T8068] ret_from_fork+0x24/0x30 [ 216.611511][ T8068] [ 216.614366][ T8068] The buggy address belongs to the object at ffff8880a8a32000 [ 216.614366][ T8068] which belongs to the cache kmalloc-2k of size 2048 [ 216.628428][ T8068] The buggy address is located 336 bytes inside of [ 216.628428][ T8068] 2048-byte region [ffff8880a8a32000, ffff8880a8a32800) [ 216.641791][ T8068] The buggy address belongs to the page: [ 216.647563][ T8068] page:ffffea0002a28c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 216.660968][ T8068] flags: 0xfffe0000000200(slab) [ 216.665836][ T8068] raw: 00fffe0000000200 ffffea0002a22e88 ffffea0002a10f88 ffff8880aa000e00 [ 216.674524][ T8068] raw: 0000000000000000 ffff8880a8a32000 0000000100000001 0000000000000000 [ 216.683114][ T8068] page dumped because: kasan: bad access detected [ 216.689629][ T8068] [ 216.691997][ T8068] Memory state around the buggy address: [ 216.697641][ T8068] ffff8880a8a32000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.705710][ T8068] ffff8880a8a32080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.713783][ T8068] >ffff8880a8a32100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.721847][ T8068] ^ [ 216.730528][ T8068] ffff8880a8a32180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.738759][ T8068] ffff8880a8a32200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.747184][ T8068] ================================================================== [ 216.755423][ T8068] Disabling lock debugging due to kernel taint 18:28:39 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x32) 18:28:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x2d, 0xd8, 0x8}, 0x20) 18:28:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4a42f0bd4b09cee9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x1) 18:28:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r1, r3) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 18:28:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 18:28:39 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000114e56bdde49f"], 0x20}}, 0x0) dup2(r1, r0) sendmmsg(r0, &(0x7f0000000400), 0x40000000000017a, 0x0) [ 216.909502][ T8325] BPF:[1] VAR a._ [ 216.947028][ T8325] BPF:type_id=2 linkage=0 18:28:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 216.978623][ T8325] BPF: 18:28:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @dev}, r2}}, 0x48) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x88d0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0xffff996a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) [ 217.008516][ T8325] BPF:Invalid type_id [ 217.038290][ T8325] BPF: [ 217.038290][ T8325] 18:28:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x29, 0xd8, 0x8}, 0x20) 18:28:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 18:28:40 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000114e56bdde49f"], 0x20}}, 0x0) dup2(r1, r0) sendmmsg(r0, &(0x7f0000000400), 0x40000000000017a, 0x0) 18:28:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @dev}, r2}}, 0x48) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x88d0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0xffff996a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 18:28:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 18:28:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/216, 0x29, 0xd8, 0x8}, 0x20) [ 217.367686][ T8068] Kernel panic - not syncing: panic_on_warn set ... [ 217.374332][ T8068] CPU: 1 PID: 8068 Comm: kworker/1:5 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 217.385867][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.396039][ T8068] Workqueue: usb_hub_wq hub_event [ 217.401090][ T8068] Call Trace: [ 217.404436][ T8068] dump_stack+0x18f/0x20d [ 217.408777][ T8068] ? __mutex_lock+0xf50/0x13c0 [ 217.413545][ T8068] panic+0x2e3/0x75c [ 217.417471][ T8068] ? __warn_printk+0xf3/0xf3 [ 217.422243][ T8068] ? preempt_schedule_common+0x5e/0xc0 [ 217.428445][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 217.433382][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 217.438240][ T8068] ? preempt_schedule_thunk+0x16/0x18 [ 217.443626][ T8068] ? trace_hardirqs_on+0x55/0x230 [ 217.448670][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 217.453523][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 217.458395][ T8068] end_report+0x4d/0x53 [ 217.462652][ T8068] kasan_report.cold+0xd/0x37 [ 217.467336][ T8068] ? __mutex_lock+0x1033/0x13c0 [ 217.472190][ T8068] __mutex_lock+0x1033/0x13c0 [ 217.476874][ T8068] ? mousedev_cleanup+0x21/0x180 [ 217.481818][ T8068] ? print_usage_bug+0x240/0x240 [ 217.486848][ T8068] ? trace_hardirqs_off+0x50/0x220 [ 217.491960][ T8068] ? mutex_trylock+0x2c0/0x2c0 [ 217.496739][ T8068] ? mark_held_locks+0x9f/0xe0 [ 217.501512][ T8068] ? kfree+0x1eb/0x2b0 [ 217.505613][ T8068] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 217.511601][ T8068] ? kfree_const+0x51/0x60 [ 217.516024][ T8068] ? mousedev_cleanup+0x21/0x180 [ 217.520993][ T8068] mousedev_cleanup+0x21/0x180 [ 217.525950][ T8068] mousedev_destroy+0x28/0xa0 [ 217.530750][ T8068] __input_unregister_device+0x1b0/0x430 [ 217.536395][ T8068] release_nodes+0x499/0x910 [ 217.541037][ T8068] ? devres_remove_group+0x440/0x440 [ 217.546428][ T8068] devres_release_group+0x160/0x210 [ 217.552071][ T8068] wacom_remove+0x244/0x3b0 [ 217.557277][ T8068] hid_device_remove+0xed/0x240 [ 217.562228][ T8068] ? wacom_close+0x80/0x80 [ 217.566760][ T8068] ? hid_compare_device_paths+0xc0/0xc0 [ 217.572329][ T8068] device_release_driver_internal+0x231/0x500 [ 217.580062][ T8068] bus_remove_device+0x2dc/0x4a0 [ 217.585150][ T8068] device_del+0x481/0xd30 [ 217.589935][ T8068] ? device_link_add_missing_supplier_links+0x370/0x370 [ 217.596888][ T8068] ? mark_held_locks+0x9f/0xe0 [ 217.601754][ T8068] ? _raw_spin_unlock_irq+0x1f/0x80 [ 217.606971][ T8068] hid_destroy_device+0xe1/0x150 [ 217.611921][ T8068] usbhid_disconnect+0x9f/0xe0 [ 217.616699][ T8068] usb_unbind_interface+0x1bd/0x8a0 [ 217.621945][ T8068] ? __pm_runtime_idle+0xd1/0x320 [ 217.627003][ T8068] ? usb_autoresume_device+0x60/0x60 [ 217.632299][ T8068] device_release_driver_internal+0x432/0x500 [ 217.638376][ T8068] bus_remove_device+0x2dc/0x4a0 [ 217.643327][ T8068] device_del+0x481/0xd30 [ 217.647667][ T8068] ? device_link_add_missing_supplier_links+0x370/0x370 [ 217.654614][ T8068] ? usb_remove_ep_devs+0x3e/0x80 [ 217.659657][ T8068] ? remove_intf_ep_devs+0x13f/0x1d0 [ 217.664961][ T8068] usb_disable_device+0x211/0x690 [ 217.669996][ T8068] usb_disconnect+0x284/0x8d0 [ 217.674773][ T8068] hub_event+0x17ca/0x38f0 [ 217.679421][ T8068] ? hub_port_debounce+0x260/0x260 [ 217.684539][ T8068] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 217.690525][ T8068] ? debug_smp_processor_id+0x2f/0x185 [ 217.696019][ T8068] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 217.701579][ T8068] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 217.707569][ T8068] process_one_work+0x965/0x16a0 [ 217.712519][ T8068] ? lock_release+0x800/0x800 [ 217.717294][ T8068] ? pwq_dec_nr_in_flight+0x310/0x310 [ 217.722887][ T8068] ? rwlock_bug.part.0+0x90/0x90 [ 217.727837][ T8068] worker_thread+0x7ab/0xe20 [ 217.732471][ T8068] ? process_one_work+0x16a0/0x16a0 [ 217.737677][ T8068] kthread+0x3b5/0x4a0 [ 217.741748][ T8068] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 217.747643][ T8068] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 217.753981][ T8068] ret_from_fork+0x24/0x30 [ 217.760033][ T8068] Kernel Offset: disabled [ 217.764718][ T8068] Rebooting in 86400 seconds..