[ 94.975851][ T27] audit: type=1800 audit(1580873176.233:26): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 95.923446][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 95.923457][ T27] audit: type=1800 audit(1580873177.223:29): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 95.949924][ T27] audit: type=1800 audit(1580873177.233:30): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2020/02/05 03:26:28 fuzzer started 2020/02/05 03:26:30 dialing manager at 10.128.0.26:40485 2020/02/05 03:26:30 syscalls: 2939 2020/02/05 03:26:30 code coverage: enabled 2020/02/05 03:26:30 comparison tracing: enabled 2020/02/05 03:26:30 extra coverage: enabled 2020/02/05 03:26:30 setuid sandbox: enabled 2020/02/05 03:26:30 namespace sandbox: enabled 2020/02/05 03:26:30 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/05 03:26:30 fault injection: enabled 2020/02/05 03:26:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/05 03:26:30 net packet injection: enabled 2020/02/05 03:26:30 net device setup: enabled 2020/02/05 03:26:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/05 03:26:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:29:06 executing program 0: syzkaller login: [ 265.188022][ T9867] IPVS: ftp: loaded support on port[0] = 21 03:29:06 executing program 1: [ 265.322071][ T9867] chnl_net:caif_netlink_parms(): no params data found [ 265.457815][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.467511][ T9871] IPVS: ftp: loaded support on port[0] = 21 [ 265.476153][ T9867] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.484436][ T9867] device bridge_slave_0 entered promiscuous mode [ 265.508414][ T9867] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.515529][ T9867] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.524153][ T9867] device bridge_slave_1 entered promiscuous mode 03:29:06 executing program 2: [ 265.580942][ T9867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.599897][ T9867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.671819][ T9867] team0: Port device team_slave_0 added [ 265.694212][ T9867] team0: Port device team_slave_1 added [ 265.742362][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.765651][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.792730][ T9867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.809227][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.816509][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.842974][ T9867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.880953][ T9874] IPVS: ftp: loaded support on port[0] = 21 03:29:07 executing program 3: [ 265.949461][ T9867] device hsr_slave_0 entered promiscuous mode [ 266.007236][ T9867] device hsr_slave_1 entered promiscuous mode [ 266.114682][ T9871] chnl_net:caif_netlink_parms(): no params data found [ 266.285722][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.292900][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.307546][ T9871] device bridge_slave_0 entered promiscuous mode 03:29:07 executing program 4: [ 266.329199][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.336507][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.344786][ T9871] device bridge_slave_1 entered promiscuous mode [ 266.365112][ T9879] IPVS: ftp: loaded support on port[0] = 21 [ 266.434141][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.530458][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.643036][ T9871] team0: Port device team_slave_0 added [ 266.651703][ T9882] IPVS: ftp: loaded support on port[0] = 21 [ 266.663907][ T9874] chnl_net:caif_netlink_parms(): no params data found [ 266.688881][ T9871] team0: Port device team_slave_1 added [ 266.750451][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.765659][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 03:29:08 executing program 5: [ 266.791865][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.874448][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.882213][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.910894][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.922459][ T9867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.018909][ T9867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.083538][ T9867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.140957][ T9867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.209357][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.218497][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.227111][ T9874] device bridge_slave_0 entered promiscuous mode [ 267.237582][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.244671][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.252829][ T9874] device bridge_slave_1 entered promiscuous mode [ 267.317725][ T9871] device hsr_slave_0 entered promiscuous mode [ 267.375971][ T9871] device hsr_slave_1 entered promiscuous mode [ 267.415750][ T9871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.423507][ T9871] Cannot create hsr debugfs directory [ 267.432716][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 267.458630][ T9885] IPVS: ftp: loaded support on port[0] = 21 [ 267.479796][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.497802][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.551315][ T9874] team0: Port device team_slave_0 added [ 267.575885][ T9874] team0: Port device team_slave_1 added [ 267.675459][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.683643][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.712630][ T9874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.731443][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.738576][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.766515][ T9874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.790491][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.798580][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.806918][ T9879] device bridge_slave_0 entered promiscuous mode [ 267.815286][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.822479][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.830413][ T9879] device bridge_slave_1 entered promiscuous mode [ 267.929113][ T9874] device hsr_slave_0 entered promiscuous mode [ 267.966675][ T9874] device hsr_slave_1 entered promiscuous mode [ 268.005743][ T9874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.013327][ T9874] Cannot create hsr debugfs directory [ 268.035064][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.071130][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.133281][ T9882] chnl_net:caif_netlink_parms(): no params data found [ 268.166770][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 268.178565][ T9879] team0: Port device team_slave_0 added [ 268.215895][ T9879] team0: Port device team_slave_1 added [ 268.289810][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.296966][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.323089][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.368528][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.379172][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.406199][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.447528][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.454640][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.463374][ T9882] device bridge_slave_0 entered promiscuous mode [ 268.475693][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.482873][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.491386][ T9882] device bridge_slave_1 entered promiscuous mode [ 268.502600][ T9871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.555453][ T9871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 268.648171][ T9879] device hsr_slave_0 entered promiscuous mode [ 268.696171][ T9879] device hsr_slave_1 entered promiscuous mode [ 268.745693][ T9879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.753284][ T9879] Cannot create hsr debugfs directory [ 268.794929][ T9871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.844632][ T9871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.921711][ T9867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.931176][ T9882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.949350][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.956647][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.964435][ T9885] device bridge_slave_0 entered promiscuous mode [ 268.988421][ T9882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.021186][ T9882] team0: Port device team_slave_0 added [ 269.027517][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.034662][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.043602][ T9885] device bridge_slave_1 entered promiscuous mode [ 269.068739][ T9882] team0: Port device team_slave_1 added [ 269.113895][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.122531][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.133224][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.146315][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.181710][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.190670][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.218176][ T9882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.234385][ T9867] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.242930][ T9874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.294184][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.302152][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.329443][ T9882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.359549][ T9885] team0: Port device team_slave_0 added [ 269.369797][ T9874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.442035][ T9874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.501389][ T9874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.540892][ T9885] team0: Port device team_slave_1 added [ 269.567100][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.576628][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.585163][ T3218] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.593340][ T3218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.603033][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.629604][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.638097][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.664424][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.702329][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.711090][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.720094][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.727232][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.735101][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.745095][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.754534][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.763270][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.790113][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.847840][ T9882] device hsr_slave_0 entered promiscuous mode [ 269.896094][ T9882] device hsr_slave_1 entered promiscuous mode [ 269.935801][ T9882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.943388][ T9882] Cannot create hsr debugfs directory [ 269.956418][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.965432][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.979776][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.087902][ T9885] device hsr_slave_0 entered promiscuous mode [ 270.137661][ T9885] device hsr_slave_1 entered promiscuous mode [ 270.175769][ T9885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.183447][ T9885] Cannot create hsr debugfs directory [ 270.228638][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.237745][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.257175][ T9879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.299810][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.308703][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.318331][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.327291][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.344085][ T9867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.358168][ T9879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.417924][ T9879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.460606][ T9879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.519690][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.594345][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.605744][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.640437][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.649028][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.658328][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.738672][ T9882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.794412][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.803845][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.812613][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.819824][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.833592][ T9867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.850473][ T9882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.943914][ T9882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.980214][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.988836][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.999418][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.008835][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.015985][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.047656][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.062172][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.071600][ T9882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.113265][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.137703][ T9885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.180661][ T9885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.264464][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.274539][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.286627][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.295258][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.304057][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.313168][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.323118][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.333062][ T9885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.388756][ T9885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.455720][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.463582][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.496082][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.504552][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.514310][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.523055][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.544535][ T9874] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.564979][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.581708][ T9871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.604747][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.615841][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.624231][ T2752] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.631398][ T2752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.676130][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.684189][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.693750][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.702675][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.709865][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.718250][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.726661][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.736960][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.744835][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.760687][ T9867] device veth0_vlan entered promiscuous mode [ 271.796326][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.805522][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.813611][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.821474][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.841893][ T9871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.866766][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.874639][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.883217][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.892492][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.906210][ T9867] device veth1_vlan entered promiscuous mode [ 271.913284][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.921820][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.932888][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.965446][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.974908][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.006821][ T9882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.026303][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.035067][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.043807][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.050911][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.058715][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.067581][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.076719][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.083793][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.117468][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.128212][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.139015][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.149430][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.158769][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.168141][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.191150][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.226443][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.234402][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.243283][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.252889][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.261674][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.273087][ T9882] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.297422][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.310744][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.320274][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.329858][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.340024][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.349138][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.358442][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.368872][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.377588][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.385403][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.399428][ T9867] device veth0_macvtap entered promiscuous mode [ 272.409709][ T9871] device veth0_vlan entered promiscuous mode [ 272.424470][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.433280][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.443053][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.452025][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.460581][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.482170][ T9879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.492898][ T9879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.519823][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.529059][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.538443][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.548790][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.557735][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.567069][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.576172][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.583251][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.591253][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.602864][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.612073][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.619192][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.628047][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.636473][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.658499][ T9867] device veth1_macvtap entered promiscuous mode [ 272.669932][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.682489][ T9871] device veth1_vlan entered promiscuous mode [ 272.690613][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.699802][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.709519][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.717765][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.732752][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.777383][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.790318][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.801622][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.811775][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.820970][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.829985][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.838797][ T2752] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.845946][ T2752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.853845][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.862664][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.872007][ T2752] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.879305][ T2752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.887211][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.897882][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.906498][ T2752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.921786][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.958200][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.966573][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.975199][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.984638][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.993413][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.001893][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.010975][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.018669][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.035180][ T9882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.048054][ T9882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.061813][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.085205][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.094286][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.103313][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.113485][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.122133][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.131169][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.140288][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.149409][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.158307][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.166557][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.199854][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.218548][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.229327][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.330988][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.347069][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.356543][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.367141][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.376657][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.384188][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.392135][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.401229][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.423733][ T9871] device veth0_macvtap entered promiscuous mode [ 273.448442][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.457830][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.466707][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.475933][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.484684][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.526935][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.540010][ T9882] 8021q: adding VLAN 0 to HW filter on device batadv0 03:29:14 executing program 0: r0 = inotify_init() ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 273.582184][ T9874] device veth0_vlan entered promiscuous mode [ 273.618502][ T9871] device veth1_macvtap entered promiscuous mode [ 273.654917][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.664298][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.700215][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 03:29:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) [ 273.760034][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.782627][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.829821][ T9874] device veth1_vlan entered promiscuous mode [ 273.856255][ T9879] device veth0_vlan entered promiscuous mode 03:29:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20) [ 273.875500][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.900904][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.919197][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.936964][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.944871][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 03:29:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f00000000001547e8b9c8", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:29:15 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) [ 274.016931][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.030188][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.039487][ T9916] ptrace attach of "/root/syz-executor.0"[9915] was attempted by "/root/syz-executor.0"[9916] [ 274.043220][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.080239][ T9885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.122498][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.142286][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:29:15 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000240)='tmpfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@mode={'mode'}}]}) [ 274.165950][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.173511][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.188889][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.201116][ T9879] device veth1_vlan entered promiscuous mode [ 274.236729][ T9871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.271835][ T9871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.284594][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.306667][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.315456][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 03:29:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10}, {0x9, 0x4}]}]}}, &(0x7f00000000c0)=""/220, 0x36, 0xdc, 0x8}, 0x20) [ 274.341545][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.352243][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.361779][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.370641][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.420665][ T9874] device veth0_macvtap entered promiscuous mode [ 274.479771][ T9874] device veth1_macvtap entered promiscuous mode [ 274.493513][ T9933] BPF:[1] FUNC_PROTO (anon) [ 274.507566][ T9933] BPF:return=0 args=( [ 274.516551][ T9933] BPF:0 (invalid-name-offset) [ 274.523117][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.532737][ T9933] BPF:, 4 (invalid-name-offset) [ 274.535326][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.544155][ T9933] BPF:) [ 274.551158][ T9933] BPF: [ 274.554109][ T9933] BPF:Invalid arg#1 [ 274.564821][ T9933] BPF: [ 274.564821][ T9933] [ 274.569704][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.572571][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.593051][ T9933] BPF:[1] FUNC_PROTO (anon) [ 274.598305][ T9933] BPF:return=0 args=( [ 274.602428][ T9933] BPF:0 (invalid-name-offset) [ 274.608685][ T9933] BPF:, 4 (invalid-name-offset) [ 274.614635][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.622517][ T9933] BPF:) [ 274.625416][ T9933] BPF: [ 274.629471][ T9933] BPF:Invalid arg#1 [ 274.634323][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.642080][ T9933] BPF: [ 274.642080][ T9933] [ 274.723396][ T9882] device veth0_vlan entered promiscuous mode [ 274.760011][ T9879] device veth0_macvtap entered promiscuous mode [ 274.776307][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.785065][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.796389][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.821475][ T9882] device veth1_vlan entered promiscuous mode [ 274.840415][ T9874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.852647][ T9874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.862875][ T9874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.873801][ T9874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.885259][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.902989][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 03:29:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r2) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) [ 274.928522][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.938205][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.956719][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.966206][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.025348][ T9879] device veth1_macvtap entered promiscuous mode [ 275.037769][ T9874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.055623][ T9874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.071219][ T9874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.081730][ T9874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.093366][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.117980][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.129105][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.142150][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.154055][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.169380][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.181627][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.257887][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.271124][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.300264][ T9885] device veth0_vlan entered promiscuous mode [ 275.319547][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.328693][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.343304][ T9882] device veth0_macvtap entered promiscuous mode [ 275.356896][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.367779][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.378133][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.388992][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.399439][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.409948][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.421478][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.490766][ T9882] device veth1_macvtap entered promiscuous mode [ 275.508203][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.523304][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.532283][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.541132][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.552150][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.566879][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.579716][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.591584][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.601590][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.612098][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.624646][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.636347][ T9885] device veth1_vlan entered promiscuous mode [ 275.653427][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.664817][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:29:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000000c0)=""/236, 0x2e, 0xec, 0x8}, 0x20) [ 275.730577][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.748381][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.765958][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.788579][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.804270][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.825289][ T9949] BPF:[1] ENUM (anon) [ 275.827004][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.835716][ T9949] BPF:size=4 vlen=1 [ 275.844084][ T9949] BPF: [ 275.845840][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.848297][ T9949] BPF:Invalid name [ 275.863482][ T9949] BPF: [ 275.863482][ T9949] [ 275.863752][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.870911][ T9949] BPF:[1] ENUM (anon) [ 275.882854][ T9949] BPF:size=4 vlen=1 [ 275.886522][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.887195][ T9949] BPF: [ 275.903370][ T9949] BPF:Invalid name [ 275.908036][ T9949] BPF: [ 275.908036][ T9949] [ 276.025792][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.037347][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.051536][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.062489][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.073612][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.084193][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.094228][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.104820][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.114941][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.128007][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.139799][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.168511][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.194468][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.204211][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 03:29:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chmod(&(0x7f0000000040)='./file0\x00', 0x0) close(0xffffffffffffffff) [ 276.220043][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.237864][ T9885] device veth0_macvtap entered promiscuous mode [ 276.291365][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.312389][ T9885] device veth1_macvtap entered promiscuous mode [ 276.444840][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.463643][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.476178][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.486736][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.496680][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.507154][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.517353][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.527820][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.538789][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.549928][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.562962][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.577225][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.590206][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.602512][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.614150][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.624210][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.635952][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.645873][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.656343][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.666224][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.677040][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.687725][ T9885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.699268][ T9885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.713599][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.726275][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.734941][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:29:18 executing program 4: r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:29:18 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) dup2(r0, r1) 03:29:18 executing program 3: r0 = socket$inet(0x2, 0xa, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 03:29:18 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x80086603, 0x0) 03:29:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x9, 0x200, 0x40}, 0x3c) 03:29:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x6, 0x0, 0x200}, 0x3c) 03:29:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 277.066279][ T9970] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 03:29:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) 03:29:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 03:29:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) 03:29:18 executing program 3: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000100), 0x0) 03:29:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)='b', 0x1) 03:29:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0xeb000000, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/236, 0x1a, 0xec, 0x8}, 0x20) 03:29:18 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x80086601, &(0x7f00000000c0)) 03:29:18 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000002000000000000000700000d000000000900000003000000050000000200000007000000030000000b000000030000000d00000004000000050000000100000008000000010000000000"], &(0x7f00000000c0)=""/236, 0x5e, 0xec, 0x8}, 0x20) 03:29:18 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x6628, 0x0) 03:29:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r0) [ 277.586480][T10001] BPF:Invalid section offset [ 277.660480][T10012] BPF:[1] FUNC_PROTO (anon) [ 277.666942][T10001] BPF:Invalid section offset 03:29:19 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010825bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000eeffffff1c001a8018000a8014000700114ab99f530feeca0000000000000001"], 0x3c}}, 0x0) [ 277.716764][T10012] BPF:return=0 args=( [ 277.720932][T10012] BPF:3 (invalid-name-offset) 03:29:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 03:29:19 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 277.838800][T10012] BPF:, 2 (invalid-name-offset) [ 277.865808][T10012] BPF:, 3 (invalid-name-offset) 03:29:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000007000000c60000000000be00950000000000000057e0f076c05184463cf5275f5f6a"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2aa}, 0x48) 03:29:19 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x5) [ 277.886115][T10012] BPF:, 3 (invalid-name-offset) [ 277.922893][T10012] BPF:, 4 (invalid-name-offset) [ 277.945137][T10012] BPF:, 1 (invalid-name-offset) 03:29:19 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'user.', '\x00'}) [ 277.998095][T10012] BPF:, 1 (invalid-name-offset) [ 278.003075][T10012] BPF:) [ 278.018890][T10012] BPF: [ 278.033829][T10012] BPF:Invalid arg#1 [ 278.037859][T10012] BPF: [ 278.037859][T10012] [ 278.058661][T10012] BPF:[1] FUNC_PROTO (anon) 03:29:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x200}, 0x3c) [ 278.092653][T10012] BPF:return=0 args=( [ 278.121252][T10012] BPF:3 (invalid-name-offset) [ 278.154943][T10012] BPF:, 2 (invalid-name-offset) 03:29:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0x10}, {}, {0x9, 0x4}]}]}}, &(0x7f00000000c0)=""/220, 0x46, 0xdc, 0x8}, 0x20) [ 278.176874][T10012] BPF:, 3 (invalid-name-offset) [ 278.192051][T10012] BPF:, 3 (invalid-name-offset) [ 278.206304][T10012] BPF:, 4 (invalid-name-offset) 03:29:19 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, &(0x7f00000000c0)=""/236, 0x32, 0xec, 0x8}, 0x20) [ 278.229306][T10012] BPF:, 1 (invalid-name-offset) [ 278.249340][T10012] BPF:, 1 (invalid-name-offset) [ 278.284612][T10012] BPF:) [ 278.291364][T10012] BPF: [ 278.307351][T10049] BPF:[1] FUNC_PROTO (anon) [ 278.311994][T10049] BPF:return=0 args=( [ 278.319975][T10012] BPF:Invalid arg#1 [ 278.334226][T10012] BPF: [ 278.334226][T10012] 03:29:19 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x5) 03:29:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, &(0x7f00000000c0)=""/236, 0x32, 0xec, 0x8}, 0x20) 03:29:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev}, {@in=@broadcast}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) [ 278.413851][T10049] BPF:0 (anon) [ 278.432577][T10053] BPF:[1] ARRAY (anon) [ 278.434011][T10049] BPF:, 0 (invalid-name-offset) [ 278.455816][T10049] BPF:, 0 (anon) [ 278.456303][T10053] BPF:type_id=2 index_type_id=2 nr_elems=0 [ 278.485968][T10053] BPF: [ 278.503935][T10049] BPF:, 4 (invalid-name-offset) [ 278.509216][T10053] BPF:Invalid index [ 278.524390][T10049] BPF:) [ 278.532009][T10053] BPF: [ 278.532009][T10053] [ 278.535671][T10049] BPF: [ 278.540165][T10049] BPF:Invalid arg#1 [ 278.554732][T10053] BPF:[1] ARRAY (anon) [ 278.558427][T10049] BPF: [ 278.558427][T10049] [ 278.566958][T10053] BPF:type_id=2 index_type_id=2 nr_elems=0 03:29:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x8}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 278.592222][T10053] BPF: [ 278.595259][T10053] BPF:Invalid index [ 278.606229][T10049] BPF:[1] FUNC_PROTO (anon) [ 278.630692][T10049] BPF:return=0 args=( [ 278.649660][T10049] BPF:0 (anon) [ 278.652321][T10062] BPF:[1] ARRAY (anon) [ 278.655494][T10053] BPF: [ 278.655494][T10053] [ 278.666869][T10049] BPF:, 0 (invalid-name-offset) [ 278.672754][T10062] BPF:type_id=2 index_type_id=0 nr_elems=0 [ 278.685352][T10049] BPF:, 0 (anon) [ 278.691965][T10062] BPF: 03:29:20 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x5}]}}, &(0x7f00000000c0)=""/236, 0x26, 0xec, 0x8}, 0x20) [ 278.702735][T10049] BPF:, 4 (invalid-name-offset) [ 278.715508][T10062] BPF:Invalid index [ 278.744583][T10049] BPF:) [ 278.744769][T10062] BPF: [ 278.744769][T10062] [ 278.757806][T10062] BPF:[1] ARRAY (anon) [ 278.769230][T10049] BPF: [ 278.769342][T10062] BPF:type_id=2 index_type_id=0 nr_elems=0 [ 278.819208][T10049] BPF:Invalid arg#1 [ 278.832329][T10070] BPF:Total section length too long [ 278.839100][T10049] BPF: [ 278.839100][T10049] [ 278.850953][T10062] BPF: [ 278.860449][T10070] BPF:Total section length too long 03:29:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aca6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) 03:29:20 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 278.863022][T10062] BPF:Invalid index 03:29:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) [ 278.891480][T10062] BPF: [ 278.891480][T10062] 03:29:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}, {0xb}]}]}}, &(0x7f0000000240)=""/249, 0x3e, 0xf9, 0x8}, 0x20) 03:29:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8f579000048e3c3de47a110526616e608ceae47a825d86800278dcff47d010000805ac0a1db560c6f5afaf0307fa3552070e64f8f364602f9763beda0ea8202fc7894a80b852d", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:29:20 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBMODE(r2, 0x4b44, 0x0) [ 279.093722][T10087] BPF: (invalid-name-offset) type_id=0 bits_offset=0 [ 279.129586][T10087] BPF: [ 279.136346][T10087] BPF:Invalid member name_offset:11 03:29:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x32, 0x119}, 0x14}}, 0x0) 03:29:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) [ 279.142836][T10087] BPF: [ 279.142836][T10087] [ 279.155549][T10091] ptrace attach of "/root/syz-executor.3"[10090] was attempted by "/root/syz-executor.3"[10091] [ 279.157942][T10087] BPF: (invalid-name-offset) type_id=0 bits_offset=0 03:29:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1) [ 279.277633][T10087] BPF: [ 279.294476][T10087] BPF:Invalid member name_offset:11 [ 279.332606][T10087] BPF: [ 279.332606][T10087] 03:29:20 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0xf0ffffff0f0000, 0x20}) 03:29:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x400) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 03:29:20 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0406618, 0x0) 03:29:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) dup(0xffffffffffffffff) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x200, 0x9ce0, 0x0, 0x1, 0x7f}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000340)={0xa, 0x4e22, 0x47fffc, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000cdfacac9fbeb2c46c4d66b2b28fa2900000008e835b8b18806defe231f9a17f6952367e603ae52adfe"], 0x18}, 0x0) 03:29:21 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) close(r0) 03:29:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x1, 0x2}) 03:29:21 executing program 3: pkey_mprotect(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)) 03:29:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x12, [@enum={0x0, 0x33}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/244, 0x26, 0xec, 0x8}, 0x20) 03:29:21 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f00000000c0)=""/220, 0x36, 0xdc, 0x8}, 0x20) [ 279.995472][T10129] BPF:Total section length too long [ 280.017380][T10129] BPF:Total section length too long 03:29:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000000c0)=""/236, 0x26, 0xec, 0x8}, 0x20) 03:29:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2012}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 03:29:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, 0x0, 0x0, 0x120, 0x0, 0x0) [ 280.193037][T10137] BPF:[1] FUNC_PROTO (anon) [ 280.221658][T10137] BPF:return=0 args=( 03:29:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000005b40)) [ 280.243051][T10137] BPF:0 (anon) [ 280.261713][T10137] BPF:, vararg [ 280.278109][T10137] BPF:) [ 280.287023][T10137] BPF: 03:29:21 executing program 4: r0 = io_uring_setup(0xd, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000010c0)=[0xffffffffffffffff], 0x1) [ 280.296167][T10145] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 280.317314][T10137] BPF:Invalid arg#1 [ 280.347860][T10137] BPF: [ 280.347860][T10137] [ 280.367159][T10137] BPF:[1] FUNC_PROTO (anon) [ 280.389254][T10137] BPF:return=0 args=( [ 280.408308][T10137] BPF:0 (anon) [ 280.426476][T10137] BPF:, vararg 03:29:21 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) getsockname(r0, 0x0, &(0x7f0000000540)) [ 280.438525][T10137] BPF:) [ 280.446282][T10137] BPF: [ 280.452104][T10137] BPF:Invalid arg#1 [ 280.475523][T10137] BPF: [ 280.475523][T10137] [ 280.566073][T10152] ------------[ cut here ]------------ [ 280.571605][T10152] ODEBUG: free active (active state 0) object type: work_struct hint: io_ring_file_ref_switch+0x0/0xac0 [ 280.583167][T10152] WARNING: CPU: 1 PID: 10152 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 280.592729][T10152] Kernel panic - not syncing: panic_on_warn set ... [ 280.599334][T10152] CPU: 1 PID: 10152 Comm: syz-executor.4 Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 280.609228][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.619296][T10152] Call Trace: [ 280.622608][T10152] dump_stack+0x197/0x210 [ 280.626956][T10152] ? debug_print_object+0x100/0x250 [ 280.632162][T10152] panic+0x2e3/0x75c [ 280.636064][T10152] ? add_taint.cold+0x16/0x16 [ 280.640742][T10152] ? __kasan_check_write+0x14/0x20 [ 280.645862][T10152] ? __warn.cold+0x14/0x3e [ 280.650299][T10152] ? __warn+0xd9/0x1cf [ 280.654371][T10152] ? debug_print_object+0x168/0x250 [ 280.659569][T10152] __warn.cold+0x2f/0x3e [ 280.663809][T10152] ? debug_print_object+0x168/0x250 [ 280.669049][T10152] report_bug+0x289/0x300 [ 280.673376][T10152] do_error_trap+0x11b/0x200 [ 280.677968][T10152] do_invalid_op+0x37/0x50 [ 280.682381][T10152] ? debug_print_object+0x168/0x250 [ 280.687586][T10152] invalid_op+0x23/0x30 [ 280.691750][T10152] RIP: 0010:debug_print_object+0x168/0x250 [ 280.697564][T10152] Code: dd 00 d4 91 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 00 d4 91 88 48 c7 c7 60 c9 91 88 e8 57 9c a1 fd <0f> 0b 83 05 e3 13 01 07 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 280.717173][T10152] RSP: 0018:ffffc900016d7c30 EFLAGS: 00010082 [ 280.723242][T10152] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 280.731251][T10152] RDX: 0000000000000000 RSI: ffffffff815eb7c6 RDI: fffff520002daf78 [ 280.739244][T10152] RBP: ffffc900016d7c70 R08: ffff888052338640 R09: ffffed1015d245c9 [ 280.747342][T10152] R10: ffffed1015d245c8 R11: ffff8880ae922e43 R12: 0000000000000001 [ 280.755323][T10152] R13: ffffffff89b7e460 R14: ffffffff814c81f0 R15: ffff88809a093a80 [ 280.763314][T10152] ? __exit_umh+0x2e0/0x2e0 [ 280.767955][T10152] ? vprintk_func+0x86/0x189 [ 280.772545][T10152] debug_check_no_obj_freed+0x2d4/0x43f [ 280.778096][T10152] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 280.783659][T10152] kfree+0xf8/0x2c0 [ 280.787471][T10152] io_sqe_files_unregister+0x3b1/0x6c0 [ 280.792929][T10152] io_ring_ctx_wait_and_kill+0x430/0x9a0 [ 280.798569][T10152] ? __sanitizer_cov_trace_cmp8+0x10/0x20 [ 280.804292][T10152] io_uring_release+0x42/0x50 [ 280.808968][T10152] __fput+0x2ff/0x890 [ 280.812951][T10152] ? io_ring_ctx_wait_and_kill+0x9a0/0x9a0 [ 280.818756][T10152] ____fput+0x16/0x20 [ 280.822731][T10152] task_work_run+0x145/0x1c0 [ 280.827481][T10152] exit_to_usermode_loop+0x316/0x380 [ 280.832770][T10152] do_syscall_64+0x676/0x790 [ 280.837364][T10152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.843303][T10152] RIP: 0033:0x414f31 [ 280.847256][T10152] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 280.866876][T10152] RSP: 002b:00007ffc051cc470 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 280.875392][T10152] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000414f31 [ 280.883361][T10152] RDX: 0000001b2d420000 RSI: 0000000000000000 RDI: 0000000000000003 [ 280.892285][T10152] RBP: 0000000000000001 R08: 00000000f7cdcd26 R09: 00000000f7cdcd2a [ 280.900254][T10152] R10: 00007ffc051cc550 R11: 0000000000000293 R12: 000000000075bf20 [ 280.908221][T10152] R13: 0000000000044753 R14: 0000000000760568 R15: 000000000075bf2c [ 280.917689][T10152] Kernel Offset: disabled [ 280.922230][T10152] Rebooting in 86400 seconds..