Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. 2019/09/30 06:11:24 fuzzer started 2019/09/30 06:11:25 dialing manager at 10.128.0.26:46117 2019/09/30 06:11:26 syscalls: 2341 2019/09/30 06:11:26 code coverage: enabled 2019/09/30 06:11:26 comparison tracing: enabled 2019/09/30 06:11:26 extra coverage: extra coverage is not supported by the kernel 2019/09/30 06:11:26 setuid sandbox: enabled 2019/09/30 06:11:26 namespace sandbox: enabled 2019/09/30 06:11:26 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/30 06:11:26 fault injection: enabled 2019/09/30 06:11:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/30 06:11:26 net packet injection: enabled 2019/09/30 06:11:26 net device setup: enabled 06:13:17 executing program 0: ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', 'systemcgroup.vmnet0bdev\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4800, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x6, @raw_data="e3b025c3fd7ab525391c64aec6edfe72a5accd1cd5de8eebbd885ad60ffa5396f3aec6d0c7d1f1c15aef2276c4be6c0748331fb29a2b8f3edb035553d4698647bb831d2e8c50e5f5310c0e108bd9a39bc0e9f5d00b028c30d4d1cc808839f02532fa98095e5e504265ab2781603c79cd2f87084fa6c8be5a6e036e0f8ddc9e00f40146d0a763023c050afa91c6e71a6010ff4854e468542fbe940965f3ba7372b1a642b4d1a8bcb8c708a5c29c72c6da8d663949c491e12888532b49bcadee55d34276b651935711"}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001cc0)={@remote, @remote, 0x0}, &(0x7f0000001d00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001d40)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000001e40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001e80)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000001f80)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001fc0)={@loopback, @rand_addr, 0x0}, &(0x7f0000002000)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002280)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000002380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002400)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000002500)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002540)={@dev, 0x0}, &(0x7f0000002580)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002680)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000002780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002880)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000028c0)={0x0, @rand_addr, @loopback}, &(0x7f0000002900)=0xc) getpeername$packet(r1, &(0x7f0000002e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002e40)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000002e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002ec0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002f00)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000003000)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003040)={0x11, 0x0, 0x0}, &(0x7f0000003080)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003100)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000003200)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000003940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003900)={&(0x7f0000003240)={0x6a4, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xf8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xb5f4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xa0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x79f7}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x1ff, 0x1, 0xd, 0x401}, {0xff, 0xfc, 0x9, 0xffffffc4}, {0x7, 0x7, 0x37, 0x800}, {0x9, 0x1, 0x5, 0x1000}, {0x9447, 0x0, 0x1, 0x8}, {0x6, 0x0, 0x7d, 0xfffffff7}]}}}]}}, {{0x8, 0x1, r14}, {0x100, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7997}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x1d8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xa3d}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r20}, {0xb4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r21}}, {0x8}}}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x40}, 0x20008002) r22 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) ioctl$MON_IOCX_GETX(r22, 0x4018920a, &(0x7f0000003ac0)={&(0x7f0000003980), &(0x7f00000039c0)=""/212, 0xd4}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000003b00), &(0x7f0000003b40)=0x8) r23 = socket$kcm(0x29, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r23, 0x40286608, &(0x7f0000003b80)={0xc1, 0x5, 0x1, 0x0, 0x100, 0x3f}) gin: [ 180.777442][ T8806] IPVS: ftp: loaded support on port[0] = 21 06:13:17 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x101) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8000, 0x40641) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000180)={0x9, 0x18, [0x8001, 0x9, 0x3, 0xffffff80, 0x7, 0x2]}) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x400, 0x0) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz1\x00', {0x2, 0x0, 0x200, 0x9}, 0xf, [0xa905, 0x1f, 0x20, 0x6, 0x0, 0xfffffffc, 0xbe1e, 0x8, 0x8, 0x3, 0x10000, 0x8, 0x6, 0x0, 0xfffffffa, 0x5, 0x5dd, 0x1, 0x8, 0x3, 0x2e, 0xfffffffe, 0x0, 0x35d9, 0xe7, 0x10000, 0x1, 0xfff, 0x1f, 0x40, 0xffffffe5, 0x48a8, 0xfffff000, 0x10000, 0x4, 0x0, 0x6, 0x8, 0x4, 0xd9, 0x0, 0x8001, 0x7, 0x89, 0x3, 0xed0a, 0x8, 0x401, 0x9, 0x2, 0x1, 0x80000000, 0x2, 0x2, 0xf4, 0x0, 0x9, 0x62f, 0x40, 0x6141, 0x137ee9c1, 0xfffffffc, 0x6, 0x1], [0x9, 0xffffffc1, 0xd3, 0x8, 0x9, 0xe0000, 0x7, 0x8, 0x81, 0x3, 0x400, 0x3f, 0x2, 0x4, 0x80, 0x8, 0x2, 0x8, 0xc10, 0x9, 0x3, 0x5, 0x1, 0x5, 0x7fff, 0xfff, 0x8654, 0x7, 0x0, 0x20, 0xffff7fff, 0x1, 0x1, 0x1f, 0x1, 0x1, 0x9, 0x8, 0x6, 0x20, 0x0, 0x7f, 0xffffffff, 0x5, 0x10000000, 0x0, 0x0, 0x0, 0x9, 0x3f, 0x7, 0x20, 0x1, 0x5fa, 0x6, 0x1f, 0x0, 0x2, 0x7, 0x1, 0x7fff, 0x2, 0xe00, 0x40000], [0x3, 0x4, 0x0, 0x3ff, 0x20, 0x8, 0x6, 0x6, 0x5, 0xd3, 0x9, 0x1, 0x8, 0x9, 0x6, 0x4, 0x9f, 0x9, 0x7, 0x1, 0x1, 0x8001, 0x3800000, 0x3, 0x80000000, 0x4, 0x3, 0x3, 0x5, 0x800, 0x2, 0x650, 0x100, 0x9, 0x0, 0x92, 0x7f, 0x4, 0x9, 0x7, 0x1f, 0x4, 0x5, 0x9, 0x0, 0x0, 0xfa, 0x80, 0x7ff, 0x9, 0x400, 0x81, 0x5917, 0x8, 0x7, 0x1000, 0x7989, 0x6, 0x80000000, 0x44e8, 0xffff, 0x8, 0x5886, 0x4], [0x1000, 0x8, 0x9b2, 0x6, 0x10001, 0xb5, 0x2, 0x10, 0x10000, 0xffffff03, 0xfc, 0xffffffff, 0x7b3, 0xfff, 0x7, 0x5, 0x400, 0x2, 0x4, 0x80000000, 0x1, 0x38b2, 0x0, 0x80, 0xcf, 0x7f, 0x800, 0x7, 0x5dcc, 0x5, 0x0, 0x20, 0xc00, 0x400, 0x7, 0x2, 0x7bfb911, 0x7ff, 0x513d, 0x8000, 0xc7, 0x9, 0x3ff, 0x3, 0x5, 0x12, 0x8001, 0x7f, 0x1, 0x7, 0xffff8000, 0x8001, 0x6800000, 0x100, 0x14e1, 0x0, 0x91e, 0xffff, 0xff, 0xffffffff, 0xe758, 0x2, 0x200, 0x3]}, 0x45c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r6) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) r8 = getpgrp(0xffffffffffffffff) r9 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) kcmp(r7, r8, 0x5, r9, r1) r10 = syz_open_dev$sndpcmp(&(0x7f0000000780)='/dev/snd/pcmC#D#p\x00', 0x2, 0x10080) bind$bt_rfcomm(r10, &(0x7f00000007c0)={0x1f, {0x4, 0xf7, 0xff, 0x0, 0x1, 0x2}, 0x98}, 0xa) r11 = accept(0xffffffffffffffff, &(0x7f0000000800)=@caif=@dgm, &(0x7f0000000880)=0x80) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r11, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, r12, 0x104, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2004c051}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xf2f07ccac44913ee}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x168, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x138, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf04e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x5797aa831afb87d5}, 0x20024081) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000cc0)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r13, &(0x7f0000000f40)={&(0x7f0000000d00), 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x160, r14, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdb5b}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}]}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3b6f99df}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2a65}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000002}, 0x4800) r15 = syz_open_dev$vcsa(&(0x7f0000001000)='/dev/vcsa#\x00', 0x5, 0x200) perf_event_open(&(0x7f0000000f80)={0x1, 0x70, 0x3f, 0xc1, 0x6, 0x3, 0x0, 0x100000001, 0x82, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}, 0x0, 0x7fff, 0x6, 0x8, 0x8, 0xab, 0xffff}, r4, 0xe, r15, 0xb) capset(&(0x7f0000001040)={0x20080522, r8}, &(0x7f0000001080)={0x8, 0x8, 0xbf, 0x81, 0x3, 0x7}) [ 180.928542][ T8806] chnl_net:caif_netlink_parms(): no params data found [ 180.962192][ T8809] IPVS: ftp: loaded support on port[0] = 21 [ 181.025549][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.032749][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.052267][ T8806] device bridge_slave_0 entered promiscuous mode 06:13:17 executing program 2: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x84000904) socket$can_bcm(0x1d, 0x2, 0x2) r1 = dup3(0xffffffffffffffff, r0, 0x100000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = socket(0x9, 0x0, 0x6) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f00000001c0)=""/165, 0xa5}, {&(0x7f0000000280)=""/84, 0x54}], 0x3, &(0x7f0000000340)=""/17, 0x11}, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x21) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) r4 = syz_open_dev$adsp(&(0x7f0000000800)='/dev/adsp#\x00', 0xff, 0x0) connect$rds(r4, &(0x7f0000000840)={0x2, 0x4e23, @remote}, 0x10) r5 = syz_open_dev$usb(&(0x7f0000000880)='/dev/bus/usb/00#/00#\x00', 0x8, 0x28440) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000008c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000900)) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000940)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000980)) r8 = syz_open_dev$usbmon(&(0x7f00000009c0)='/dev/usbmon#\x00', 0x2400000, 0x6abe4dceac0ddf23) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x5, 0x101, 0x80, 0x4}, &(0x7f0000000ac0)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000b00)={r9, 0xe6, "59e3946c4dc6ba91bc2fc174bb05ffd2f296a2d2a534a662746b909f2f1e5d56420a00e0873fee55e7926b8b3a222ec99013123405aaa37e6b7979a65809e2a2763ceed7b839d9748328ab9969515400aaf9f3e1a7ef032cdf4582e668edeab87d8e857e3461a73684b582815b01ade3d4ec6fbbdd4e08905a76e1ab3b08a39d08bbed592570381247b91a5c81e50f4ad7b2f0fd95535bf901267a37e16a52654d0398e3e2e363286a15f6544fa91892d9043091e6e61821ef4aca97eb52cdc80ef03de54395e439c7d8bb25f80a9b5367c66ff8e986e136373dfb6a223559f2d2389a2b3ef9"}, &(0x7f0000000c00)=0xee) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r10, 0x114, 0x1, &(0x7f0000000c40)={0x2, 0x4e20, @rand_addr=0x5df}, 0x10) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000c80)=0x4, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11, 0x4010, r2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) sched_getparam(r11, &(0x7f0000000d00)) r12 = socket$can_raw(0x1d, 0x3, 0x1) dup(r12) [ 181.074238][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.081352][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.090103][ T8806] device bridge_slave_1 entered promiscuous mode [ 181.171115][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.209692][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.269610][ T8809] chnl_net:caif_netlink_parms(): no params data found [ 181.287580][ T8806] team0: Port device team_slave_0 added [ 181.308834][ T8806] team0: Port device team_slave_1 added [ 181.315399][ T8812] IPVS: ftp: loaded support on port[0] = 21 06:13:18 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1f8, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x148, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffddbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast2, 0xef}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc4c}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x8000, 0x180200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x5c, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x280000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in={0x2, 0x4e22, @rand_addr=0x8001}, @in={0x2, 0x4e22, @rand_addr=0x4}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000004c0)={r4, @in6={{0xa, 0x4e20, 0x7ff, @local, 0x8}}}, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x8, @local}}, 0x4, 0x3f}, &(0x7f0000000640)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000680)={r6, 0x8}, &(0x7f00000006c0)=0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000700)={{0x7, 0x44}, 0x0, 0x7, 0x8, {0x1, 0x1}, 0xff, 0x7fffffff}) r7 = syz_open_dev$usb(&(0x7f0000000780)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x4f2440) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f00000007c0)=0x9, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000840)={0x0, {0x1, 0xffff}}) timerfd_create(0x3, 0x1000) r8 = syz_open_dev$cec(&(0x7f0000000880)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f00000008c0)=[@timestamp, @mss={0x2, 0x266}, @timestamp, @mss={0x2, 0x5}], 0x4) r9 = syz_open_dev$swradio(&(0x7f0000000900)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000940), &(0x7f0000000980)=0xb) r10 = syz_open_dev$usb(&(0x7f00000009c0)='/dev/bus/usb/00#/00#\x00', 0xc1, 0x20000) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000a00)={0x3, 0x1, 0x1f}) r11 = socket(0x3, 0xc0004, 0x7f) write$binfmt_elf64(r11, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x20, 0x0, 0x81, 0x3, 0x2, 0x3e, 0x81, 0x287, 0x40, 0x2a2, 0x7ff, 0x6, 0x38, 0x2, 0xff98, 0x7ff, 0x5}, [{0x60000000, 0x6, 0x8, 0x20, 0x7fffffff, 0x7fffffff, 0x1, 0xffff}], "d3c74fed61485944d64066e787376f057d6976905e748b26285e30f9679437963bd3c939c3a4fcef8257b86323c350461deaf4436ff8458899a05fedab0ae5d7a943dcf2309bbde2d340a93b204cc1b1aab1147a030929dbc69dce0c7102743b98d1fb1e03940c891a975c80b9536e405abd2959063c8c6f47d9d6c255fe2488e032a30bfd1a86f432b328457339e02917e9498230a7f9e4f79f9bab2db8c5f90a710c69ea8300bc8d6a63ae59e6911892567afd9053db5c1058f14b1eb690", [[], [], [], []]}, 0x537) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) ppoll(&(0x7f0000000f80)=[{r0, 0x888}, {r12, 0x10}], 0x2, &(0x7f0000001000)={r13, r14+30000000}, &(0x7f0000001040)={0x1}, 0x8) r15 = openat$audio(0xffffffffffffff9c, &(0x7f0000001080)='/dev/audio\x00', 0x101082, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r15, 0x0, 0x485, 0x0, 0x0) [ 181.417440][ T8806] device hsr_slave_0 entered promiscuous mode [ 181.473225][ T8806] device hsr_slave_1 entered promiscuous mode [ 181.526230][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.542927][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.550972][ T8809] device bridge_slave_0 entered promiscuous mode [ 181.553126][ T8814] IPVS: ftp: loaded support on port[0] = 21 [ 181.575997][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.592887][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.600897][ T8809] device bridge_slave_1 entered promiscuous mode [ 181.627977][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 06:13:18 executing program 4: unshare(0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xe409, 0x80000) ioctl$KDMKTONE(r1, 0x4b30, 0xfffffffffffff800) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x800003e, 0x4, 0x11}) r2 = shmget$private(0x0, 0x4000, 0xfc001251, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f00000000c0)=""/132) ioctl$RTC_PIE_ON(r1, 0x7005) faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x8, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') ioctl$KIOCSOUND(r4, 0x4b2f, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x243c, 0x9, 0x8001, 0x6, 0xea5, 0x5, 0x0]}, &(0x7f0000000280)=0x12) listen(r0, 0x6) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) r6 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xe9, 0xc0000) pwrite64(r6, &(0x7f00000003c0)="f830072def9324c7e2ada5b32f628c3e940c73950320d67cf63397073ad97beb15adfcf55a350782e5f7dead543731683326bc9de4271dcf980d4e90a563c193e6cea5a98405cc60dbe4b304269cdfaa744dfd82780bf88da91553da8f939b66e601f63b5e2608820929dacf5ccef62d3692e59abbf4d78777afcb5376a95748971a0f4b577570208b7afcfc0e57a5d36e7689d49d2079cab6daddc8e620175eba3d6962f64f893c106291e3e09711ffe58c3fc9bd2770da055928d881e2178edfa519fbba", 0xc5, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)={{0x10b, 0x1, 0x9, 0x28a, 0x323, 0x8, 0x17, 0x2}, "04c4a53b21cfcce53a0607f1864dd509cf6f6bc77f29af791708018943d0d0e55a3c0f80abb38cdeeb207b0067bf186c12c28f3da3812fd4617e1c0ee958efaf3b38d44e51b65c7ee0e5cc5403bcfa6f86c8ec6e641346d730109fc4405707fa930d05fd4ec03bddb6cefd908e1754d047dbfcbeffb3fcb1688f29", [[], [], [], [], []]}, 0x59b) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000a80)) r7 = syz_open_dev$swradio(&(0x7f0000000ac0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000b40)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @local}, 0x336, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)='nlmon0\x00', 0x3b, 0x3, 0x3f}) r8 = semget(0x1, 0x4, 0x8) semctl$SEM_STAT(r8, 0x6, 0x12, &(0x7f0000000bc0)=""/249) listxattr(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=""/49, 0x31) r9 = syz_open_dev$mouse(&(0x7f0000000d40)='/dev/input/mouse#\x00', 0x1f, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000d80)={0x8c, {{0xa, 0x4e21, 0x3f, @loopback, 0x8}}}, 0x88) [ 181.675184][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.691622][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.698955][ T8806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.707312][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.714910][ T8806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.800078][ T8809] team0: Port device team_slave_0 added [ 181.861801][ T8809] team0: Port device team_slave_1 added [ 181.914370][ T8817] IPVS: ftp: loaded support on port[0] = 21 06:13:18 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0xad, &(0x7f0000000080)=0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x22001, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000100)={0x4, [0x3, 0x3749, 0x1, 0x5]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x105000, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000200)={{0x1, 0x0, @reserved="dd0902ac94d4f4f52404debcd13491a94dd5fdfea8180166266f934df146eb43"}, 0x53, [], "ef250c9b4dcb5c8fd0fc8e923eb9fc248321f341a5603009c8528ab9fda07f44ef17569c27619d42b1709d134ffa5a949f9b1be0a9df44c1be3ddb8264864fc3eeeabf85d27ae2d9326724f9da38d8339f31f6"}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x1, 0x392, 0xfffffffa, {}, {0x77359400}, {0x4, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "3443a19c11337523"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8801) r4 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000440)={0x2, "ea5fbcf8bbcb30809ece188fca06ec156087bef48dc85cf21c60279fd104c5f1", 0x1, 0x1}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x202800, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000004c0)=""/71, &(0x7f0000000540)=0x47) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x40080, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x228f2, r6, 0x10000000) r7 = socket$inet(0x2, 0x4, 0x8e) getsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f00000005c0)={@dev, @dev, @multicast1}, &(0x7f0000000600)=0xc) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm_plock\x00', 0x10100, 0x0) r9 = syz_open_dev$amidi(&(0x7f0000000680)='/dev/amidi#\x00', 0x9, 0x400) ioctl$VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f00000006c0)={0xf, 0x9}) r10 = socket$inet(0x2, 0x4, 0x0) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000700)=0x400000, 0x4) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000740)={0x7, 0x23, 0x10000, 0x8d400, r9}) ioctl(r11, 0x3, &(0x7f0000000780)="dbd4af7af036f1455c2fc48de20cb9") r12 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f00000014c0)='trusted.overlay.nlink\x00', &(0x7f0000001500)={'U+', 0x400}, 0x28, 0x0) r13 = open(&(0x7f0000001540)='./file0\x00', 0x1, 0x10) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f0000001580)={0x6, {{0x2, 0x4e24, @broadcast}}}, 0x88) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000001640)=""/214) [ 182.010887][ T8809] device hsr_slave_0 entered promiscuous mode [ 182.063369][ T8809] device hsr_slave_1 entered promiscuous mode [ 182.071064][ T8821] IPVS: ftp: loaded support on port[0] = 21 [ 182.093170][ T8809] debugfs: Directory 'hsr0' with parent '/' already present! [ 182.111066][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.119638][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.147747][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 182.246102][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.254446][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.263418][ T8812] device bridge_slave_0 entered promiscuous mode [ 182.271050][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.278339][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.286518][ T8812] device bridge_slave_1 entered promiscuous mode [ 182.295526][ T8814] chnl_net:caif_netlink_parms(): no params data found [ 182.306547][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.348063][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.364812][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.375529][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.388592][ T8806] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.400752][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.437662][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.445399][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.453634][ T8814] device bridge_slave_0 entered promiscuous mode [ 182.461567][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.469063][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.477015][ T8814] device bridge_slave_1 entered promiscuous mode [ 182.510546][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.520324][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.528870][ T237] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.536265][ T237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.547264][ T8812] team0: Port device team_slave_0 added [ 182.593291][ T8814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.605969][ T8814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.622445][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.631459][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.640176][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.647381][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.656375][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.665699][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.675302][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.684339][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.695014][ T8812] team0: Port device team_slave_1 added [ 182.705755][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.732486][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 182.769060][ T8806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.781603][ T8806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.794982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.803901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.812533][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.821216][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.831835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.840992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.850170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.865634][ T8814] team0: Port device team_slave_0 added [ 182.936343][ T8812] device hsr_slave_0 entered promiscuous mode [ 182.954250][ T8812] device hsr_slave_1 entered promiscuous mode [ 183.023547][ T8812] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.032285][ T8814] team0: Port device team_slave_1 added [ 183.095307][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.102487][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.110662][ T8817] device bridge_slave_0 entered promiscuous mode [ 183.120739][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.128011][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.136010][ T8817] device bridge_slave_1 entered promiscuous mode [ 183.170268][ T8821] chnl_net:caif_netlink_parms(): no params data found [ 183.194084][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.207134][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.265868][ T8814] device hsr_slave_0 entered promiscuous mode [ 183.314617][ T8814] device hsr_slave_1 entered promiscuous mode [ 183.352982][ T8814] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.379203][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.413745][ T8817] team0: Port device team_slave_0 added [ 183.430896][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.439790][ T8817] team0: Port device team_slave_1 added [ 183.494852][ T8817] device hsr_slave_0 entered promiscuous mode [ 183.543356][ T8817] device hsr_slave_1 entered promiscuous mode [ 183.603106][ T8817] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.611415][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.618993][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.627783][ T8821] device bridge_slave_0 entered promiscuous mode [ 183.636554][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.643928][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.651777][ T8821] device bridge_slave_1 entered promiscuous mode [ 183.727389][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.744584][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 06:13:20 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) [ 183.774511][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.788666][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.830140][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.850611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.881801][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.909363][ T8821] team0: Port device team_slave_0 added [ 183.924104][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.937602][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.946870][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.955849][ T8816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.964866][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.973861][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.982512][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.989692][ T8816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.005143][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.014742][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.024250][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.033900][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.042643][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.051710][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.060857][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.069496][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.078133][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.086085][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.099253][ T8809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.114605][ T8809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 06:13:20 executing program 0: [ 184.134437][ T8821] team0: Port device team_slave_1 added [ 184.152977][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.163196][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.184965][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.194615][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 06:13:20 executing program 0: [ 184.248946][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.277222][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 06:13:20 executing program 0: [ 184.293907][ T237] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.301021][ T237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.323838][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.333564][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 06:13:21 executing program 0: 06:13:21 executing program 0: [ 184.350398][ T237] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.357614][ T237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.380975][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 06:13:21 executing program 0: [ 184.412022][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.437356][ T8814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.495748][ T8821] device hsr_slave_0 entered promiscuous mode [ 184.533314][ T8821] device hsr_slave_1 entered promiscuous mode [ 184.563232][ T8821] debugfs: Directory 'hsr0' with parent '/' already present! [ 184.574149][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.614290][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.622715][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.636799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.647411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.659490][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.667992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.676198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.693104][ T8814] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.721200][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.730725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.751110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 06:13:21 executing program 1: [ 184.770384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.777641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.792420][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.801923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.816246][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.823505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.828034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.840226][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.848392][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.856334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.868969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.933249][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.942526][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.953022][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.962412][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.973886][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.982387][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.991135][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.000159][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.008531][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.017335][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.026441][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.033566][ T8819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.041089][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.049522][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.058117][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.067125][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.075626][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.082685][ T8819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.091315][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.099240][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.109126][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.137825][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.147464][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.158958][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.175343][ T8814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.190325][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.199789][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.208917][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.217499][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.226493][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.235239][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.244491][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.272588][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.281320][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.290486][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.303501][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.317382][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.335242][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.351389][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.361511][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.378550][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.389138][ T8814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.410259][ T8821] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.420638][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.430772][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.439151][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.448553][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.457572][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.464747][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.475140][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.511831][ T8821] IPv6: veth1_to_bridge: Failed to add prefix route for address fe80::1c; dropping [ 185.541644][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.557527][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.594721][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.596496][ T8871] QAT: Invalid ioctl [ 185.636858][ T237] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.644187][ T237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.674841][ T8870] QAT: Invalid ioctl [ 185.699600][ T8821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.710956][ T8821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.730939][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.741407][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.754463][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.765177][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.773979][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.782693][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.791508][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.800046][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.808887][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.817600][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.826793][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.836705][ T237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 06:13:22 executing program 2: [ 185.886579][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 06:13:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:23 executing program 0: 06:13:23 executing program 1: 06:13:23 executing program 4: 06:13:23 executing program 2: 06:13:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x400000000000349, 0x0, 0x0) 06:13:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, 0x0, 0x0) dup2(r0, r1) 06:13:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) [ 186.536424][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 186.565690][ T8909] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 06:13:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ftruncate(r0, 0x0) 06:13:23 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000300)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x66) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x8000) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0x0, 0x7, {{0x1, 0x0, 0x5, 0x89, 0x401, 0xfff, {0x2, 0x8000, 0x1ff, 0x80000004, 0x400, 0x4, 0x0, 0xfffff335, 0x8, 0x975, 0x2, r3, r4, 0x401, 0x1f0}}, {0x0, 0x1}}}, 0xa0) r5 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x8, 0x4000) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000380)) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 06:13:23 executing program 1: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000040)='pipefs\x00', &(0x7f0000000100)='\x00', 0x0) 06:13:23 executing program 4: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7fff) r2 = dup(r1) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000700000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x30b, 0xa, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x20000, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000180)={@empty}, &(0x7f00000001c0)=0x14) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 06:13:23 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='cgroup2\x00', 0x20, &(0x7f0000000100)='vboxnet1@eth0security\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x005\n\x05\x00\x00\x00\x00\x00\x00\x00\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>4Or\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7}r|A\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf\x9c\xfd\xc85\xbc\xdb\x12\x92\xf4k;\xbd\x8anr\x8c.\x95J\xb5g\x8d/T[\xcc\r\xd1\xa4\xb4\xaf\x9d\x04y\xdd\xc4\xbb\xd9p\xd8\x90\xd6\xb6E\xe1G\xdaP\xbd\xb8\xc7Z\r\xb4\x93^\x8b\xa2tc\x15T\xdc\xe4;\xfb0G\x9c\x16\xfc.\x1b\xb4\xeb\xf4\xd3\xefz`\xe0\xac^\x10\xee,J\x98(\x88\x04\xe3r\x1cy\x8b1\x04H\xd2\x8e\xd9yeZ`tU\xd6\xac\xa2\x89\xe8\x11\xc6W\x89\x8e\xb4\xac\xe8D\xd6\xcbi\x95\xd6\x02\xb0', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000180)='./file1\x00', 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x1, 0x2c61e8a201c4b7b5, 0x4) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x74}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r8}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, r8, {0x9, 0x4}, {0x5}, {0x3eceb4716df65dd5, 0x4}}, [{0x6, 0xb, 0x8001}]}, 0x2c}}, 0xd0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r3, 0x600, 0x120, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x16}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x8) sendfile(r2, r1, 0x0, 0x10a000d05) 06:13:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x0, &(0x7f0000004bc0)}, 0xf401}], 0x1, 0x20084b01) [ 186.941973][ C1] hrtimer: interrupt took 28192 ns 06:13:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) close(r0) [ 187.043601][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:13:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0xaf57, 0xd4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 187.090124][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 187.168144][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 187.198341][ T8951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:13:23 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0xfd, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x32) [ 187.217735][ T8951] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 187.280813][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 187.345871][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:13:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x8, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3ff}]}}]}, 0x60}}, 0x0) 06:13:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x100000000, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x80, 0x2, 0x3}, 0x1}, 0x20, 0x1, 0x0) sysfs$2(0x2, 0x0, &(0x7f00000004c0)=""/134) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x54c48a72de095e8d, 0x0) r1 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000340)=""/255) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) socketpair(0x266d371b6556d972, 0x800, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000480)={0x6, 0x0, 0x2, 0x80, 0x1, 0xb3, 0x5, 0x7, 0x37, 0x8, 0x3}, 0xb) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x2, 0x101000) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xb) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) clone(0x400000, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x901000, 0x0) 06:13:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) close(r0) 06:13:24 executing program 1: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xae52) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000980)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x0]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x880000000000000, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20, 0x4000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x2, 0x2000}, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 06:13:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:13:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x801, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x204900, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000240)={0x10002006, 0x10001, 0x2}) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000040)=[{r4, 0x22}, {r1, 0x200}, {r7, 0x4000}, {r1, 0x140}, {0xffffffffffffffff, 0x1000}, {r8, 0x8000}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x4}, 0x8) socket$inet6(0xa, 0x801, 0x0) listen(0xffffffffffffffff, 0xffeffffefffffffb) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x10000, 0xf, 0x1b, "4e5738b1715767ecab4cd06d29cd415e14398fa276e0ba41da34ca47eb58cd7af75716afbde6207c5c80d4cbdf371eb0750adb41b47db0dca521ad4e", 0x1c, "ea47f7a269bdffeca0f4d12fb8f03a0d72c8de40e40cfab214792be9d369fb6139b8015cb1d293d7263273f0b191ae63f73c1fcfcacfb47097880169"}) [ 187.792384][ T8986] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 187.798083][ T8971] kobject: 'kvm' (0000000077db19a9): kobject_uevent_env [ 187.800242][ T8986] #PF: supervisor instruction fetch in kernel mode [ 187.800250][ T8986] #PF: error_code(0x0010) - not-present page [ 187.800258][ T8986] PGD 97de4067 P4D 97de4067 PUD 88748067 PMD 0 [ 187.823357][ T8971] kobject: 'kvm' (0000000077db19a9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 187.826005][ T8986] Oops: 0010 [#1] PREEMPT SMP KASAN [ 187.826020][ T8986] CPU: 1 PID: 8986 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 187.826035][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.858551][ T8986] RIP: 0010:0x0 [ 187.862008][ T8986] Code: Bad RIP value. [ 187.866056][ T8986] RSP: 0018:ffff88805b60f848 EFLAGS: 00010246 [ 187.872104][ T8986] RAX: 0000000000000000 RBX: ffff88809af97380 RCX: 1ffff110135f2f04 [ 187.880072][ T8986] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff888060ed0f40 [ 187.888135][ T8986] RBP: ffff88805b60f880 R08: ffff88805b6023c0 R09: ffffed10135f2eb9 [ 187.896092][ T8986] R10: ffffed10135f2eb8 R11: ffff88809af975c7 R12: 0000000000000002 [ 187.904652][ T8986] R13: 0000000000000304 R14: ffff888060ed0f40 R15: 0000000000000000 [ 187.912627][ T8986] FS: 00007f257b8dd700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 187.921537][ T8986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.928118][ T8986] CR2: ffffffffffffffd6 CR3: 000000009a39b000 CR4: 00000000001426e0 [ 187.936075][ T8986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.944034][ T8986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.952164][ T8986] Call Trace: [ 187.955488][ T8986] xsk_poll+0x1e7/0x5a0 [ 187.959632][ T8986] ? xsk_setsockopt+0x730/0x730 [ 187.964470][ T8986] sock_poll+0x15e/0x480 [ 187.968740][ T8986] ? do_recvmmsg+0x7a0/0x7a0 [ 187.973321][ T8986] do_sys_poll+0x63c/0xdd0 [ 187.977728][ T8986] ? compat_core_sys_select+0x770/0x770 [ 187.983299][ T8986] ? ___preempt_schedule+0x16/0x20 [ 187.988403][ T8986] ? refcount_sub_and_test_checked+0x154/0x200 [ 187.994540][ T8986] ? refcount_dec_not_one+0x1f0/0x1f0 [ 187.999912][ T8986] ? migrate_swap_stop+0x9f0/0x9f0 [ 188.005007][ T8986] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 188.011250][ T8986] ? __kasan_check_read+0x11/0x20 [ 188.016262][ T8986] ? mark_lock+0xc2/0x1220 [ 188.020661][ T8986] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 188.026477][ T8986] ? poll_initwait+0x180/0x180 [ 188.031232][ T8986] ? poll_freewait+0x260/0x260 [ 188.036132][ T8986] ? poll_freewait+0x260/0x260 [ 188.040965][ T8986] ? poll_freewait+0x260/0x260 [ 188.045716][ T8986] ? lockdep_hardirqs_on+0x421/0x5e0 [ 188.051086][ T8986] ? retint_kernel+0x2b/0x2b [ 188.055676][ T8986] ? trace_hardirqs_on_caller+0x6a/0x240 [ 188.061554][ T8986] ? __set_current_blocked+0xd1/0x110 [ 188.066924][ T8986] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 188.072469][ T8986] ? __this_cpu_preempt_check+0x3a/0x210 [ 188.078098][ T8986] ? retint_kernel+0x2b/0x2b [ 188.082694][ T8986] ? _raw_spin_unlock_irq+0x54/0x90 [ 188.087882][ T8986] ? _raw_spin_unlock_irq+0x5e/0x90 [ 188.093071][ T8986] ? __set_current_blocked+0xd6/0x110 [ 188.098436][ T8986] ? set_user_sigmask+0x166/0x1e0 [ 188.103460][ T8986] ? sigprocmask+0x2b0/0x2b0 [ 188.108126][ T8986] __x64_sys_ppoll+0x259/0x310 [ 188.112881][ T8986] ? __ia32_sys_poll+0x470/0x470 [ 188.117804][ T8986] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 188.123268][ T8986] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.129317][ T8986] ? do_syscall_64+0x26/0x760 [ 188.134193][ T8986] ? lockdep_hardirqs_on+0x421/0x5e0 [ 188.139464][ T8986] ? trace_hardirqs_on+0x67/0x240 [ 188.144486][ T8986] do_syscall_64+0xfa/0x760 [ 188.148979][ T8986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.154864][ T8986] RIP: 0033:0x459a29 [ 188.158843][ T8986] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.178543][ T8986] RSP: 002b:00007f257b8dcc78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f 06:13:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) mount(&(0x7f0000000080)=@sr0='/dev/sr0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bdev\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000040)="da79b600cd9fd7c78ce65c47e327", 0xe, 0x1, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x8, 0x40, "fdb9a977cde88cd174d0570244330f4e2460ecf9b4e31bc8975d93896356d69048ab8c6660652befce5d12051b281fd4fffd669e7887b6556473177aa81da0", 0x22}, 0x80) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="5fa60adba055", 'hsr0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0xea) [ 188.187140][ T8986] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459a29 [ 188.195358][ T8986] RDX: 0000000020000080 RSI: 0000000000000006 RDI: 0000000020000040 [ 188.203325][ T8986] RBP: 000000000075bf20 R08: 0000000000000008 R09: 0000000000000000 [ 188.211293][ T8986] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007f257b8dd6d4 [ 188.219252][ T8986] R13: 00000000004c691d R14: 00000000004dbbf8 R15: 00000000ffffffff [ 188.227219][ T8986] Modules linked in: [ 188.231187][ T8986] CR2: 0000000000000000 06:13:24 executing program 5: r0 = socket(0x10, 0x2, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200, 0x62) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000140)={0x2, 0x10012, 0x3, r6}) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000540)=""/142) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000c00)={0x0, 0x3}) write$tun(r6, &(0x7f0000000700)={@val={0x0, 0xa01}, @val={0x6, 0x80, 0x4, 0x6, 0x6, 0x4}, @mpls={[{0x2}, {0xbe43, 0x0, 0x1}], @ipv4={{0x18, 0x4, 0x0, 0x10, 0x1070, 0x66, 0x80, 0x0, 0x88, 0x0, @rand_addr=0x4522, @broadcast, {[@noop, @generic={0x82, 0xa, "a3398fd87d23c31e"}, @generic={0x89, 0x5, "e05bf4"}, @lsrr={0x83, 0x2b, 0x7, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @empty, @multicast2, @loopback]}, @generic={0x7, 0xf, "bda31fd1283b4a8190e82a2023"}]}}, @dccp={{0x4e22, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, "f86b0e", 0xda, "ccd93e"}, "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"}}}}, 0x1086) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f00000000c0)={0x0, {}, 0x7f, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) write(r0, &(0x7f0000000000)="1f000000010141e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) 06:13:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fff, &(0x7f0000000000)="118e4170eca50d5e0bcfe4") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)=0x4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e0000001000000000f0000000000000000000020000000000a00000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000007000000000000006d000000000000000000002300000000000000809700000000000000000000000000000500000000000000000000ba00000000000000000000000000000000000000000100000000000001000000f586a8d8793f6b730fa61843643b331e6da061d35007c9e6b5cd1315ffd9533853927139ec65720dd5a8380424300002b0af4cb09b0df881beb1e1bfda8ea5ca9610842609e13ec17691ffc565204a073417b7bf4605cb98307843e459e1a2991bff390463b9a083674cb42031383b9f9769cdbe7f74bad97191c9337c3c0c344c82dd8e38e96a90e184f83ff3eccfffbe5bbbba2c290c65b3852d979346af6a68a3ca3e0ef55bbe0791bcc12536b1d303410dcd3b3dd3ce9bc2f5bd708dffaf1a6dca033c74bc933643f7bac1ca2457ffb0b569a2bf3734d3cf74eb231f6599d9e8e4ef7b390364282ce2d2116a598828c50344276947038befe1dcb73d520bf65088de987e0d720f6326c0aca6c59fe2146653fceeda1d42e4ddd821093332e70d5e378ae45fb5160a6fa657d214d3d633a1d47385bcdc3882e2a0c4561c1625f305556bd6f5169c401b7899339c4bed93256ea50cea8a8035ad0d2fa75909ce6ac4d9f1b4887aaf8e52235ee502811bbeb2e2618661024d8a087710ba8767fb4e885dd6fd89cca6b6b69cd323936a62f66886c429c862ec11b018e47bcf2ba4aff8268f10e697e7f8c94c55ad46bdb389603f4a51a7e8e05f09721686ae0bc58a1d193116f67b5c1201b7a7bbc22e551410a07c9e02262aad8ec1dfec3458cdb37e436c8d2f524bdb507375101d0ed597af3c2e09805abb1351f0c5862f0942a72a00"/635], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x2}, 0x20) [ 188.263966][ T3892] kobject: 'loop5' (0000000024a07979): kobject_uevent_env [ 188.271157][ T3892] kobject: 'loop5' (0000000024a07979): fill_kobj_path: path = '/devices/virtual/block/loop5' 06:13:25 executing program 1: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xae52) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000980)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x0]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x880000000000000, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20, 0x4000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x2, 0x2000}, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 188.314728][ T3892] kobject: 'loop4' (000000002174d332): kobject_uevent_env [ 188.322264][ T3892] kobject: 'loop4' (000000002174d332): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 188.329593][ T9000] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.5'. [ 188.361921][ T3892] kobject: 'loop0' (000000001845101b): kobject_uevent_env [ 188.402933][ T8986] ---[ end trace 959106dc375c3205 ]--- 06:13:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fff, &(0x7f0000000000)="118e4170eca50d5e0bcfe4") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)=0x4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e0000001000000000f0000000000000000000020000000000a00000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/635], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x2}, 0x20) [ 188.446204][ T3892] kobject: 'loop0' (000000001845101b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 188.458150][ T8986] RIP: 0010:0x0 [ 188.478696][ T8986] Code: Bad RIP value. [ 188.496551][ T3892] kobject: 'loop1' (000000002c7a79d2): kobject_uevent_env [ 188.521488][ T8986] RSP: 0018:ffff88805b60f848 EFLAGS: 00010246 [ 188.552660][ T3892] kobject: 'loop1' (000000002c7a79d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 188.565367][ T9015] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.5'. [ 188.592145][ T8986] RAX: 0000000000000000 RBX: ffff88809af97380 RCX: 1ffff110135f2f04 06:13:25 executing program 1: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xae52) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000980)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x0]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x880000000000000, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20, 0x4000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x2, 0x2000}, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 188.605913][ T3892] kobject: 'loop0' (000000001845101b): kobject_uevent_env [ 188.626188][ T3892] kobject: 'loop0' (000000001845101b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 188.642622][ T8986] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff888060ed0f40 06:13:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fff, &(0x7f0000000000)="118e4170eca50d5e0bcfe4") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)=0x4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e0000001000000000f0000000000000000000020000000000a00000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000007000000000000006d000000000000000000002300000000000000809700000000000000000000000000000500000000000000000000ba00000000000000000000000000000000000000000100000000000001000000f586a8d8793f6b730fa61843643b331e6da061d35007c9e6b5cd1315ffd9533853927139ec65720dd5a8380424300002b0af4cb09b0df881beb1e1bfda8ea5ca9610842609e13ec17691ffc565204a073417b7bf4605cb98307843e459e1a2991bff390463b9a083674cb42031383b9f9769cdbe7f74bad97191c9337c3c0c344c82dd8e38e96a90e184f83ff3eccfffbe5bbbba2c290c65b3852d979346af6a68a3ca3e0ef55bbe0791bcc12536b1d303410dcd3b3dd3ce9bc2f5bd708dffaf1a6dca033c74bc933643f7bac1ca2457ffb0b569a2bf3734d3cf74eb231f6599d9e8e4ef7b390364282ce2d2116a598828c50344276947038befe1dcb73d520bf65088de987e0d720f6326c0aca6c59fe2146653fceeda1d42e4ddd821093332e70d5e378ae45fb5160a6fa657d214d3d633a1d47385bcdc3882e2a0c4561c1625f305556bd6f5169c401b7899339c4bed93256ea50cea8a8035ad0d2fa75909ce6ac4d9f1b4887aaf8e52235ee502811bbeb2e2618661024d8a087710ba8767fb4e885dd6fd89cca6b6b69cd323936a62f66886c429c862ec11b018e47bcf2ba4aff8268f10e697e7f8c94c55ad46bdb389603f4a51a7e8e05f09721686ae0bc58a1d193116f67b5c1201b7a7bbc22e551410a07c9e02262aad8ec1dfec3458cdb37e436c8d2f524bdb507375101d0ed597af3c2e09805abb1351f0c5862f0942a72a00"/635], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x2}, 0x20) [ 188.668331][ T3892] kobject: 'loop1' (000000002c7a79d2): kobject_uevent_env [ 188.680758][ T8986] RBP: ffff88805b60f880 R08: ffff88805b6023c0 R09: ffffed10135f2eb9 [ 188.695734][ T3892] kobject: 'loop1' (000000002c7a79d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 188.720975][ T8986] R10: ffffed10135f2eb8 R11: ffff88809af975c7 R12: 0000000000000002 [ 188.754888][ T8986] R13: 0000000000000304 R14: ffff888060ed0f40 R15: 0000000000000000 [ 188.808469][ T8986] FS: 00007f257b8dd700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 188.845714][ T8986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.859879][ T8986] CR2: 00000000012e6fd0 CR3: 000000009a39b000 CR4: 00000000001406f0 [ 188.869414][ T3892] kobject: 'loop0' (000000001845101b): kobject_uevent_env [ 188.880190][ T3892] kobject: 'loop0' (000000001845101b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 188.900186][ T8986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.948935][ T3892] kobject: 'loop5' (0000000024a07979): kobject_uevent_env [ 188.956560][ T8986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.964807][ T3892] kobject: 'loop5' (0000000024a07979): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 188.979291][ T8986] Kernel panic - not syncing: Fatal exception [ 188.987287][ T8986] Kernel Offset: disabled [ 188.991779][ T8986] Rebooting in 86400 seconds..