Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts.
2020/01/17 10:27:36 fuzzer started
2020/01/17 10:27:37 dialing manager at 10.128.0.105:44889
2020/01/17 10:27:38 syscalls: 2836
2020/01/17 10:27:38 code coverage: enabled
2020/01/17 10:27:38 comparison tracing: enabled
2020/01/17 10:27:38 extra coverage: enabled
2020/01/17 10:27:38 setuid sandbox: enabled
2020/01/17 10:27:38 namespace sandbox: enabled
2020/01/17 10:27:38 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/17 10:27:38 fault injection: enabled
2020/01/17 10:27:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/17 10:27:38 net packet injection: enabled
2020/01/17 10:27:38 net device setup: enabled
2020/01/17 10:27:38 concurrency sanitizer: enabled
2020/01/17 10:27:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [   69.758883][ T8012] KCSAN: could not find function: 'poll_schedule_timeout'
2020/01/17 10:27:53 adding functions to KCSAN blacklist: 'xas_clear_mark' '__delete_from_page_cache' 'ext4_has_free_clusters' 'inode_sync_complete' 'complete_signal' 'blk_mq_sched_dispatch_requests' 'wbt_issue' 'ktime_get_real_seconds' 'ext4_nonda_switch' 'vm_area_dup' 'delete_from_page_cache_batch' '__add_to_page_cache_locked' 'wbt_wait' 'find_next_bit' 'filemap_map_pages' '__d_lookup_done' 'shmem_file_read_iter' 'lruvec_lru_size' 'do_signal_stop' 'shmem_getpage_gfp' 'bio_endio' 'do_syslog' 'page_counter_charge' 'kcm_rfree' 'd_instantiate_new' 'ext4_journal_check_start' 'futex_wait_queue_me' '__lru_cache_add' 'ip_tunnel_xmit' 'ext4_setattr' 'do_nanosleep' 'ext4_mb_good_group' '__ext4_new_inode' 'tick_do_update_jiffies64' 'file_update_time' 'dd_has_work' 'wbc_detach_inode' 'tomoyo_supervisor' '__snd_rawmidi_transmit_ack' 'smpboot_thread_fn' 'poll_schedule_timeout' 'echo_char' '__perf_event_overflow' 'tick_nohz_idle_stop_tick' 'n_tty_receive_buf_common' '__hrtimer_run_queues' '__remove_assoc_queue' 'find_get_pages_range_tag' 'ext4_free_inodes_count' 'tick_sched_do_timer' 'generic_fillattr' 'sit_tunnel_xmit' 'page_counter_try_charge' 'blk_stat_add' 'ext4_free_inode' 'get_cpu_idle_time_us' 'mod_timer' 'd_delete' 'rcu_gp_fqs_loop' 'process_srcu' '__mark_inode_dirty' 'pid_update_inode' 'atime_needs_update' '__find_get_block' 'xprt_clear_locked' 'iomap_dio_bio_actor' 'run_timer_softirq' 'rcu_gp_fqs_check_wake' 'common_perm_cond' 'blk_mq_free_request' 'ep_poll' 'kauditd_thread' '__skb_try_recv_from_queue' 'yama_ptracer_del' 'snd_seq_prioq_cell_out' 'fib6_ifup' 'del_timer' 'add_timer' 'mm_update_next_owner' 'install_new_memslots' 'snd_seq_check_queue' 'ext4_writepages' 'dput' 'iput' 'ext4_mark_iloc_dirty' 'blk_mq_get_request' 'lookup_fast' 'commit_echoes' 'mark_buffer_dirty_inode' 'xas_find_marked' 'pcpu_alloc' 'timer_clear_idle' 'taskstats_exit' 'blk_mq_dispatch_rq_list' 'copy_process' 'kvm_mmu_notifier_change_pte' 'audit_log_start' 'blk_mq_run_hw_queue' 'queue_access_lock' '__writeback_single_inode' 'generic_write_end' 'has_bh_in_lru' 
10:31:37 executing program 0:

10:31:37 executing program 1:

[  303.157221][ T8016] IPVS: ftp: loaded support on port[0] = 21
[  303.253547][ T8016] chnl_net:caif_netlink_parms(): no params data found
[  303.287037][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.294214][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.303237][ T8016] device bridge_slave_0 entered promiscuous mode
[  303.310635][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.318484][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.327340][ T8016] device bridge_slave_1 entered promiscuous mode
[  303.345074][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.356009][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.375659][ T8016] team0: Port device team_slave_0 added
[  303.382718][ T8016] team0: Port device team_slave_1 added
10:31:38 executing program 2:

[  303.443944][ T8016] device hsr_slave_0 entered promiscuous mode
[  303.501805][ T8016] device hsr_slave_1 entered promiscuous mode
[  303.579749][ T8019] IPVS: ftp: loaded support on port[0] = 21
[  303.651424][ T8016] netdevsim netdevsim0 netdevsim0: renamed from eth0
10:31:38 executing program 3:

[  303.714448][ T8016] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  303.783613][ T8016] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  303.829527][ T8021] IPVS: ftp: loaded support on port[0] = 21
[  303.839278][ T8016] netdevsim netdevsim0 netdevsim3: renamed from eth3
10:31:38 executing program 4:

[  303.939698][ T8023] IPVS: ftp: loaded support on port[0] = 21
[  303.975314][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.982409][ T8016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.989740][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.996880][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.064432][ T8019] chnl_net:caif_netlink_parms(): no params data found
[  304.215217][ T8026] IPVS: ftp: loaded support on port[0] = 21
[  304.234001][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.283769][ T8023] chnl_net:caif_netlink_parms(): no params data found
10:31:39 executing program 5:

[  304.342449][ T2411] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.362438][ T2411] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.372711][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  304.388746][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.396990][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.405698][ T8019] device bridge_slave_0 entered promiscuous mode
[  304.417217][ T8016] 8021q: adding VLAN 0 to HW filter on device team0
[  304.431560][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.438677][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.447237][ T8023] device bridge_slave_0 entered promiscuous mode
[  304.457098][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  304.466709][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  304.474800][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.482045][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.490015][ T8019] device bridge_slave_1 entered promiscuous mode
[  304.510990][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.520977][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  304.529699][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  304.538535][ T2411] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.545875][ T2411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.553877][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.560976][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.569238][ T8023] device bridge_slave_1 entered promiscuous mode
[  304.589479][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.599739][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.623978][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  304.632741][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  304.641442][ T2411] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.648747][ T2411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.656838][ T8021] chnl_net:caif_netlink_parms(): no params data found
[  304.670266][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.691027][ T8019] team0: Port device team_slave_0 added
[  304.700163][ T8019] team0: Port device team_slave_1 added
[  304.711002][ T8034] IPVS: ftp: loaded support on port[0] = 21
[  304.727684][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  304.763972][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  304.773035][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  304.781771][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  304.790640][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  304.799478][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  304.808351][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  304.883494][ T8019] device hsr_slave_0 entered promiscuous mode
[  304.921550][ T8019] device hsr_slave_1 entered promiscuous mode
[  304.961229][ T8019] debugfs: Directory 'hsr0' with parent '/' already present!
[  304.969515][ T8023] team0: Port device team_slave_0 added
[  304.975358][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.982527][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.990231][ T8021] device bridge_slave_0 entered promiscuous mode
[  305.007622][ T8023] team0: Port device team_slave_1 added
[  305.015436][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.023010][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.030656][ T8021] device bridge_slave_1 entered promiscuous mode
[  305.038432][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  305.047184][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  305.086661][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.097108][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  305.107615][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  305.128838][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.153674][ T8026] chnl_net:caif_netlink_parms(): no params data found
[  305.165657][ T8016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  305.213450][ T8023] device hsr_slave_0 entered promiscuous mode
[  305.251581][ T8023] device hsr_slave_1 entered promiscuous mode
[  305.291270][ T8023] debugfs: Directory 'hsr0' with parent '/' already present!
[  305.330117][ T8021] team0: Port device team_slave_0 added
[  305.356843][ T8021] team0: Port device team_slave_1 added
[  305.377701][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.387768][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.395586][ T8026] device bridge_slave_0 entered promiscuous mode
[  305.414296][ T8019] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  305.463199][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.470244][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.478365][ T8026] device bridge_slave_1 entered promiscuous mode
[  305.503838][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.535878][ T8019] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  305.633476][ T8021] device hsr_slave_0 entered promiscuous mode
[  305.671608][ T8021] device hsr_slave_1 entered promiscuous mode
[  305.731223][ T8021] debugfs: Directory 'hsr0' with parent '/' already present!
[  305.739181][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  305.746858][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  305.757796][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.782674][ T8019] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  305.823706][ T8019] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  305.875330][ T8034] chnl_net:caif_netlink_parms(): no params data found
[  305.885208][ T8026] team0: Port device team_slave_0 added
[  305.893378][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.901891][ T8026] team0: Port device team_slave_1 added
[  305.950458][ T8023] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  306.063035][ T8026] device hsr_slave_0 entered promiscuous mode
[  306.111416][ T8026] device hsr_slave_1 entered promiscuous mode
[  306.161236][ T8026] debugfs: Directory 'hsr0' with parent '/' already present!
[  306.168754][ T8023] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  306.229302][ T8023] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  306.283297][ T8023] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  306.325242][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  306.338497][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  306.387789][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.394923][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.405590][ T8034] device bridge_slave_0 entered promiscuous mode
[  306.413581][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.420620][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.428652][ T8034] device bridge_slave_1 entered promiscuous mode
[  306.463390][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  306.474888][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  306.486166][ T8016] device veth0_vlan entered promiscuous mode
[  306.497885][ T8021] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  306.555804][ T8021] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  306.613903][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.622618][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.634862][ T8016] device veth1_vlan entered promiscuous mode
[  306.649029][ T8021] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  306.685536][ T8021] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  306.734443][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.747684][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.756998][ T8026] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  306.827537][ T8026] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  306.865199][ T8026] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  306.913553][ T8026] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  307.005084][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.016143][ T8034] team0: Port device team_slave_0 added
[  307.023563][ T8034] team0: Port device team_slave_1 added
10:31:41 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb56fa54f26fb0b71d0e6adfefc41d8f7faf75e0f226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e38032a8343881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000000000000000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfdbc6ec664b91a6844efdebb7b3de8f6ad3f6c962b9f292324b7ab7f7da31cf41ab11f12fb1e2c494034127de79f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde7bac7407509a4d9a485c5989b8e673e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f53b64a74fc10070f62b6a5c67a8c59b29adceb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c6eed85de58202d456a9b794c0fe5f167728867f2257"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10)

[  307.103541][ T8034] device hsr_slave_0 entered promiscuous mode
[  307.161429][ T8034] device hsr_slave_1 entered promiscuous mode
[  307.191230][ T8034] debugfs: Directory 'hsr0' with parent '/' already present!
[  307.214887][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.225781][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  307.234619][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  307.244779][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  307.252608][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
10:31:42 executing program 0:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

[  307.274666][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.288408][ T8019] 8021q: adding VLAN 0 to HW filter on device team0
[  307.298029][ T8023] 8021q: adding VLAN 0 to HW filter on device team0
[  307.319790][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  307.328093][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  307.342024][ T8021] 8021q: adding VLAN 0 to HW filter on device team0
[  307.375311][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.386280][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  307.394790][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  307.403600][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  307.412536][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  307.420965][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.428190][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.436229][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  307.445089][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.453505][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.460708][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.468639][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  307.477426][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  307.485908][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.492958][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.500798][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  307.509800][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.518375][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.525420][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.533517][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  307.542682][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.574421][ T8026] 8021q: adding VLAN 0 to HW filter on device team0
[  307.581852][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  307.589954][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  307.598122][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  307.607117][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  307.616116][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  307.624874][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.631965][ T8035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.640153][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.649259][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  307.657693][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  307.666358][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  307.674259][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  307.714139][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
10:31:42 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x190)

[  307.725332][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  307.733900][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  307.742639][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.751867][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.758932][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.769421][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  307.778854][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.787764][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  307.796699][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  307.805746][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  307.814581][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  307.824272][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  307.832636][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  307.840935][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  307.849799][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  307.858706][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  307.867630][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  307.876222][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  307.885083][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  307.893704][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  307.902529][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  307.911581][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  307.920417][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  307.928951][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.936067][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.945540][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  307.954307][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  307.963356][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  307.972197][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.980909][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.987982][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.995884][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  308.004395][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  308.012831][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  308.022194][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  308.031037][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  308.039762][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  308.048260][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  308.056788][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  308.067876][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  308.082468][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  308.095779][ T8034] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  308.134202][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  308.143682][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  308.152400][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  308.160933][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  308.182311][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.192345][ T8021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  308.204592][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  308.213222][ T8034] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  308.243662][ T8034] netdevsim netdevsim5 netdevsim2: renamed from eth2
10:31:43 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in6=@rand_addr="11a474743c2f24a5a7d34ab3610699a6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr="ff2c7e15966c4d0463533fc2862607c2", 0x4d3}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb71}}, 0xe8)

[  308.311567][ T8026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  308.325700][ T8026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  308.361480][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  308.370146][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  308.387163][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  308.394876][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  308.402554][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  308.411299][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  308.420227][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  308.429182][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  308.438239][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  308.446657][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  308.454907][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  308.462490][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  308.472018][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  308.482006][ T8034] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  308.536276][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.560156][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.579414][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
10:31:43 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10)

[  308.595822][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  308.655494][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  308.671920][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  308.690317][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  308.699565][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  308.708517][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  308.717952][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  308.727323][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  308.735175][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  308.758782][ T8019] device veth0_vlan entered promiscuous mode
[  308.776710][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.796407][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  308.813566][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  308.822743][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  308.830749][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  308.841387][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  308.849550][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  308.864028][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  308.879160][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  308.896368][ T8019] device veth1_vlan entered promiscuous mode
[  308.905618][ T8021] device veth0_vlan entered promiscuous mode
10:31:43 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0x1000000a0}], 0x1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x1}, 0x50)

[  308.916584][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  308.931850][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  308.945086][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  308.957482][ T8023] device veth0_vlan entered promiscuous mode
[  308.973315][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  308.991944][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  309.012666][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  309.034519][ T8021] device veth1_vlan entered promiscuous mode
[  309.043484][ T8023] device veth1_vlan entered promiscuous mode
[  309.067526][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.078094][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  309.086822][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  309.100992][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  309.109453][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  309.118002][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  309.127341][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  309.175538][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  309.196056][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  309.223062][ T8034] 8021q: adding VLAN 0 to HW filter on device team0
10:31:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x0, 0x2)
r1 = syz_open_dev$vcsu(0x0, 0x100, 0x20182)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x4, 0x4, 0x20, 0x400})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
dup(0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a20303030303030303030303030303030303031323700e4152fe8d0406944d2029b74e66c40da046e892212be46769bd9e0be556cda93fdc7029497ec04f387b1016b39bab6c64ba57758585fa59bd77ae4891d5afd84804ed15009004fd58c92a81751b982032d1c0984285bd37070ea6a590a8377"], 0x1, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0)

[  309.265150][ T8026] device veth0_vlan entered promiscuous mode
[  309.284381][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  309.306524][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
10:31:44 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xc0, &(0x7f0000000340)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r1}, 0xc)

[  309.341487][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.348664][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
10:31:44 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x3)

[  309.398957][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  309.418888][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
10:31:44 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x80003, 0x0)

[  309.503059][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  309.515753][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  309.536682][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  309.554785][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  309.584296][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  309.598877][ T2411] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.606043][ T2411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.647600][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  309.674237][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  309.695001][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  309.705518][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  309.717522][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  309.727356][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  309.740675][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  309.755689][ T8034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.770183][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.783423][ T8026] device veth1_vlan entered promiscuous mode
[  309.801465][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  309.810025][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  309.833731][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  309.847799][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  309.874490][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.906321][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  309.916289][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  309.932919][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
10:31:44 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)

[  310.031375][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  310.040105][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  310.065441][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  310.086266][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  310.097093][ T8034] device veth0_vlan entered promiscuous mode
[  310.109972][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  310.118374][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  310.134420][ T8034] device veth1_vlan entered promiscuous mode
10:31:45 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0x1000000a0}], 0x1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x94c}}, 0x30)
write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x1}, 0x50)

10:31:45 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@dev, @local, r2}, 0xc)

10:31:45 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@dev, @local}, 0xc)

10:31:45 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0x1000000a0}], 0x1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x1}, 0x50)

10:31:45 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff)

10:31:45 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10)

10:31:45 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00')
lseek(r0, 0x2, 0x1)

10:31:45 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
fchmod(r0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)

10:31:45 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10)
dup2(r0, r1)

10:31:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  310.514999][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  310.528857][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
10:31:45 executing program 2:
mknod(&(0x7f0000000040)='./bus\x00', 0x8012, 0x5200)
r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/24, 0x18)
rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00')

10:31:45 executing program 1:
r0 = socket(0x2, 0x3, 0x0)
r1 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000000)=0x9, 0x4)
connect$unix(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10)
dup2(r1, r0)
write(r0, 0x0, 0x0)

[  310.684774][ T8155] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
10:31:46 executing program 5:
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r2}, &(0x7f0000000280)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha512-generic\x00'}})
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)

10:31:46 executing program 4:
r0 = inotify_init()
close(r0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

10:31:46 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff46d010000805ae64f8f36460234d42479aed75d492b41fd983f79e65199615607672c5995c9e79066e3ceb991601d4b9a6355ddc553687f000000a259fa65d759d7da119b71c4444cf18e38d2b30dbb21ad45e199815491be65c3154ad160c3b3ea8100cbb96a06f8b0dd4cfd90b52ebf", 0xa4}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefc}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

10:31:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f00000000c0), 0x8080fffffffe)

10:31:46 executing program 1:

10:31:46 executing program 0:
r0 = getpid()
clone3(&(0x7f0000000280)={0x20900000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0], 0x1}, 0x50)

10:31:46 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
write$binfmt_aout(r1, &(0x7f0000000540), 0x20)
close(r1)
r2 = socket(0x10, 0x80002, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

10:31:46 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x28, 0x3, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x25}]}, 0x28}}, 0x0)

[  311.436528][   T27] audit: type=1804 audit(1579257106.218:31): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237797909/syzkaller.pd9XCd/5/bus" dev="sda1" ino=16548 res=1
[  311.463413][    C0] hrtimer: interrupt took 24806 ns
10:31:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r2}, &(0x7f0000000280)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha512-generic\x00'}})

10:31:46 executing program 4:

10:31:46 executing program 1:

10:31:46 executing program 5:

10:31:46 executing program 4:

10:31:46 executing program 5:

10:31:49 executing program 2:

10:31:49 executing program 1:

10:31:49 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r2}, &(0x7f0000000280)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha512-generic\x00'}})

10:31:49 executing program 5:

10:31:49 executing program 4:

10:31:49 executing program 3:

10:31:49 executing program 4:

10:31:49 executing program 1:

10:31:49 executing program 3:

10:31:49 executing program 2:

10:31:49 executing program 5:

10:31:49 executing program 0:

10:31:49 executing program 3:

10:31:49 executing program 4:

10:31:49 executing program 0:

10:31:49 executing program 5:

10:31:49 executing program 2:

10:31:49 executing program 1:

10:31:49 executing program 3:

10:31:49 executing program 0:

10:31:49 executing program 2:

10:31:49 executing program 1:

10:31:49 executing program 5:

10:31:49 executing program 4:

10:31:49 executing program 3:

10:31:50 executing program 0:

10:31:50 executing program 4:

10:31:50 executing program 1:

10:31:50 executing program 5:

10:31:50 executing program 2:

10:31:50 executing program 0:

10:31:50 executing program 2:

10:31:50 executing program 4:

10:31:50 executing program 1:

10:31:50 executing program 3:

10:31:50 executing program 5:

10:31:50 executing program 0:

10:31:50 executing program 2:

10:31:50 executing program 1:

10:31:50 executing program 4:

10:31:50 executing program 3:

10:31:50 executing program 5:

10:31:50 executing program 0:

10:31:50 executing program 2:

10:31:50 executing program 4:

10:31:50 executing program 1:

10:31:50 executing program 3:

10:31:51 executing program 2:

10:31:51 executing program 0:

10:31:51 executing program 5:

10:31:51 executing program 4:

10:31:51 executing program 1:

10:31:51 executing program 3:

10:31:51 executing program 2:

10:31:51 executing program 5:

10:31:51 executing program 4:

10:31:51 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x122}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x20, r0, 0x0, 0x0)

10:31:51 executing program 3:

10:31:51 executing program 1:

10:31:51 executing program 4:

10:31:51 executing program 5:

10:31:51 executing program 2:

10:31:51 executing program 3:

10:31:51 executing program 5:

10:31:51 executing program 1:

10:31:51 executing program 4:

10:31:51 executing program 2:

10:31:51 executing program 5:

10:31:54 executing program 0:

10:31:54 executing program 1:

10:31:54 executing program 3:

10:31:54 executing program 2:

10:31:54 executing program 5:

10:31:54 executing program 4:

10:31:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff46d010000805ae64f8f36460234d42479aed75d492b41fd983f79e65199615607672c5995c9e79066e3ceb991601d4b9a6355ddc553687f000000a259fa65d759d7da119b71c4444cf18e38d2b30dbb21ad45e199815491be65c3154ad160c3b3ea8100cbb96a06f8b0dd4cfd90", 0xa1}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

10:31:54 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d0100008086814d7436460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa5ff67f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34", 0x8c}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

10:31:54 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d01", 0x36}], 0x4, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)

10:31:54 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0x87)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfec)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
dup2(r1, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000e00))
writev(0xffffffffffffffff, 0x0, 0x0)
socket(0xa286f325a9499de0, 0x0, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='.', 0x0, 0x5000, 0x0)

10:31:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}}, 0x0)

10:31:54 executing program 4:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000003070105000000f787060000000000000900010073787a30000000008000000000088381933a000000000000000000000900010073797a30000000000c00044000000000000000050e0003800600000000000000000000032e000240ffff"], 0x1}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={{0x14, 0x606}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x14}, @NFT_MSG_NEWRULE={0x3f8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}]}, {0xc4, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x4}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}]}, {0x68, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8}]}}]}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x238, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @void}]}, {0x1b4, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}]}}, @range={{0xa, 0x1, 'range\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}]}, {0x44, 0x1, 0x0, 0x1, [@meta={{0xffffffffffffff6d, 0x1, 'meta\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xd8, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x7c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x54c}}, 0x0)

[  320.092445][ T8405] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  320.100825][ T8405] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  320.109756][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  320.121091][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  320.133311][ T8408] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
10:31:54 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000200), 0x87)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='.', 0x0, 0x5000, 0x0)

10:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x120, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2, @remote, [], [], 'ip6_vti0\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)

[  320.141992][ T8408] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  320.150109][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  320.159515][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
10:31:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x1}, {{@in6=@rand_addr="eb205da28a77d14d2d94ed594c8f5ea1"}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe4)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4040011, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000005, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e24, @local}})
splice(r4, 0x0, r3, 0x0, 0x1000000000000007, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, <r5=>0x0})
perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

[  320.301644][ T8419] ip6t_srh: unknown srh invflags 7A00
10:31:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd)
write(r0, &(0x7f0000000000)="1d", 0x1)

10:31:55 executing program 2:
r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226)

10:31:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x1}, {{@in6=@rand_addr="eb205da28a77d14d2d94ed594c8f5ea1"}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe4)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4040011, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000005, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e24, @local}})
splice(r4, 0x0, r3, 0x0, 0x1000000000000007, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, <r5=>0x0})
perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

10:31:57 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000200), 0x87)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsync(0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000e00))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='.', 0x0, 0x5000, 0x0)

10:31:57 executing program 5:
r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast}}, {{@in6=@rand_addr="eb205da28a77d14d2d94ed594c8f5ea1"}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe4)
ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000180)=""/226)

10:31:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x1}, {{@in6=@rand_addr="eb205da28a77d14d2d94ed594c8f5ea1"}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe4)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4040011, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000005, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e24, @local}})
splice(r4, 0x0, r3, 0x0, 0x1000000000000007, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, <r5=>0x0})
perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

10:31:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
accept4(r0, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

10:31:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x1}, {{@in6=@rand_addr="eb205da28a77d14d2d94ed594c8f5ea1"}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe4)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4040011, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000005, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e24, @local}})
splice(r4, 0x0, r3, 0x0, 0x1000000000000007, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, <r5=>0x0})
perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

10:31:57 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18)

10:31:58 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

10:31:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xbb8)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xbb8)

10:31:58 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000200), 0x87)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsync(0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000e00))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='.', 0x0, 0x5000, 0x0)

10:31:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0x1f}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

10:31:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)

10:31:58 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x68)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')

[  323.499470][ T8479] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.5'.
10:31:58 executing program 4:
r0 = socket$inet(0x2, 0x100000000805, 0x0)
listen(r0, 0x40000001)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6d, &(0x7f0000745ffc), &(0x7f0000000040)=0xfdaf)

[  323.728426][ T8487] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  323.730667][ T8497] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.5'.
10:31:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:31:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:31:58 executing program 5:
mkdir(0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x5df211b9}], 0x23a, 0x0)

[  324.131979][ T8513] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
10:31:59 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000)=0x7b)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
ftruncate(r2, 0x200006)
sendfile(r0, r2, 0x0, 0x8000fffffffe)

10:31:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xbb8)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xbb8)

10:31:59 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x800}]}}}]}, 0x44}}, 0x0)

[  324.645537][ T8537] ==================================================================
[  324.653684][ T8537] BUG: KCSAN: data-race in ip6_dst_gc / ip6_dst_gc
[  324.660183][ T8537] 
[  324.662543][ T8537] write to 0xffff8880b02588cc of 4 bytes by task 8534 on cpu 0:
[  324.670191][ T8537]  ip6_dst_gc+0x19f/0x220
[  324.674532][ T8537]  dst_alloc+0x104/0x149
[  324.678788][ T8537]  ip6_dst_alloc+0x3d/0x80
[  324.683217][ T8537]  ip6_rt_cache_alloc+0x12b/0x480
[  324.688257][ T8537]  ip6_pol_route+0x5d2/0x730
[  324.692858][ T8537]  ip6_pol_route_output+0x48/0x60
[  324.697922][ T8537]  fib6_rule_lookup+0x3d6/0x470
[  324.702930][ T8537]  ip6_route_output_flags_noref+0x16b/0x230
[  324.708958][ T8537]  ip6_route_output_flags+0x50/0x1a0
[  324.714254][ T8537]  ip6_dst_lookup_tail+0x25d/0xc50
[  324.719365][ T8537]  ip6_dst_lookup_flow+0x5c/0x110
[  324.724399][ T8537]  rawv6_sendmsg+0x9be/0x2340
[  324.729081][ T8537]  inet_sendmsg+0x6d/0x90
[  324.733431][ T8537]  sock_sendmsg+0x9f/0xc0
[  324.737759][ T8537]  ____sys_sendmsg+0x212/0x4d0
[  324.742561][ T8537]  ___sys_sendmsg+0xb5/0x100
[  324.747249][ T8537]  __sys_sendmmsg+0x123/0x350
[  324.751935][ T8537]  __x64_sys_sendmmsg+0x64/0x80
[  324.756793][ T8537]  do_syscall_64+0xcc/0x3a0
[  324.761313][ T8537]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  324.767393][ T8537] 
[  324.769734][ T8537] read to 0xffff8880b02588cc of 4 bytes by task 8537 on cpu 1:
[  324.777281][ T8537]  ip6_dst_gc+0xf6/0x220
[  324.781521][ T8537]  dst_alloc+0x104/0x149
[  324.785780][ T8537]  ip6_dst_alloc+0x3d/0x80
[  324.790205][ T8537]  ip6_rt_cache_alloc+0x12b/0x480
[  324.795308][ T8537]  ip6_pol_route+0x5d2/0x730
[  324.799909][ T8537]  ip6_pol_route_output+0x48/0x60
[  324.804949][ T8537]  fib6_rule_lookup+0x3d6/0x470
[  324.809801][ T8537]  ip6_route_output_flags_noref+0x16b/0x230
[  324.815702][ T8537]  ip6_route_output_flags+0x50/0x1a0
[  324.821134][ T8537]  ip6_dst_lookup_tail+0x25d/0xc50
[  324.826380][ T8537]  ip6_dst_lookup_flow+0x5c/0x110
[  324.831522][ T8537]  rawv6_sendmsg+0x9be/0x2340
[  324.836258][ T8537]  inet_sendmsg+0x6d/0x90
[  324.840617][ T8537]  sock_sendmsg+0x9f/0xc0
[  324.844956][ T8537]  ____sys_sendmsg+0x212/0x4d0
[  324.849720][ T8537]  ___sys_sendmsg+0xb5/0x100
[  324.854330][ T8537]  __sys_sendmmsg+0x123/0x350
[  324.859018][ T8537]  __x64_sys_sendmmsg+0x64/0x80
[  324.863877][ T8537]  do_syscall_64+0xcc/0x3a0
[  324.868402][ T8537]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  324.874350][ T8537] 
[  324.876675][ T8537] Reported by Kernel Concurrency Sanitizer on:
[  324.882924][ T8537] CPU: 1 PID: 8537 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[  324.891504][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  324.901681][ T8537] ==================================================================
[  324.910286][ T8537] Kernel panic - not syncing: panic_on_warn set ...
[  324.916887][ T8537] CPU: 1 PID: 8537 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[  324.925558][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  324.935612][ T8537] Call Trace:
[  324.938913][ T8537]  dump_stack+0x11d/0x181
[  324.943273][ T8537]  panic+0x210/0x640
[  324.947184][ T8537]  ? vprintk_func+0x8d/0x140
[  324.951789][ T8537]  kcsan_report.cold+0xc/0xd
[  324.956398][ T8537]  kcsan_setup_watchpoint+0x3fe/0x460
[  324.962312][ T8537]  __tsan_read4+0xc6/0x100
[  324.966728][ T8537]  ip6_dst_gc+0xf6/0x220
[  324.970991][ T8537]  dst_alloc+0x104/0x149
[  324.975349][ T8537]  ip6_dst_alloc+0x3d/0x80
[  324.979785][ T8537]  ip6_rt_cache_alloc+0x12b/0x480
[  324.984834][ T8537]  ip6_pol_route+0x5d2/0x730
[  324.989444][ T8537]  ip6_pol_route_output+0x48/0x60
[  324.994585][ T8537]  fib6_rule_lookup+0x3d6/0x470
[  324.999450][ T8537]  ? ip6_pol_route_input+0x70/0x70
[  325.004683][ T8537]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  325.010408][ T8537]  ? dev_get_by_index_rcu+0xbe/0xe0
[  325.015723][ T8537]  ip6_route_output_flags_noref+0x16b/0x230
[  325.021633][ T8537]  ip6_route_output_flags+0x50/0x1a0
[  325.026943][ T8537]  ip6_dst_lookup_tail+0x25d/0xc50
[  325.032098][ T8537]  ? debug_smp_processor_id+0x43/0x137
[  325.037660][ T8537]  ? dst_destroy+0x210/0x210
[  325.042309][ T8537]  ? debug_smp_processor_id+0x43/0x137
[  325.047783][ T8537]  ? dst_destroy+0x210/0x210
[  325.052407][ T8537]  ? __call_rcu+0x153/0x390
[  325.057277][ T8537]  ip6_dst_lookup_flow+0x5c/0x110
[  325.062316][ T8537]  rawv6_sendmsg+0x9be/0x2340
[  325.067005][ T8537]  ? __ipv6_dev_get_saddr+0x217/0x2d0
[  325.072382][ T8537]  ? __rcu_read_unlock+0x66/0x3d0
[  325.077433][ T8537]  ? cgroup_rstat_updated+0xbe/0x1e0
[  325.082750][ T8537]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  325.089011][ T8537]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  325.094950][ T8537]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  325.101227][ T8537]  ? aa_label_sk_perm+0x89/0xe0
[  325.106116][ T8537]  ? aa_sk_perm+0x1d3/0x590
[  325.110641][ T8537]  ? tomoyo_socket_sendmsg_permission+0xb4/0x217
[  325.117008][ T8537]  inet_sendmsg+0x6d/0x90
[  325.121349][ T8537]  ? inet_sendmsg+0x6d/0x90
[  325.125869][ T8537]  ? inet_send_prepare+0x200/0x200
[  325.130981][ T8537]  sock_sendmsg+0x9f/0xc0
[  325.135326][ T8537]  ____sys_sendmsg+0x212/0x4d0
[  325.140110][ T8537]  ___sys_sendmsg+0xb5/0x100
[  325.144715][ T8537]  ? __fget+0xb8/0x1d0
[  325.148817][ T8537]  ? __fget_light+0xaf/0x190
[  325.153422][ T8537]  ? __fdget+0x2c/0x40
[  325.157522][ T8537]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  325.163799][ T8537]  __sys_sendmmsg+0x123/0x350
[  325.168486][ T8537]  ? __read_once_size+0x5a/0xe0
[  325.173357][ T8537]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  325.179097][ T8537]  ? _copy_to_user+0x84/0xb0
[  325.183704][ T8537]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  325.190057][ T8537]  ? put_timespec64+0x94/0xc0
[  325.194751][ T8537]  __x64_sys_sendmmsg+0x64/0x80
[  325.199622][ T8537]  do_syscall_64+0xcc/0x3a0
[  325.204145][ T8537]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  325.210032][ T8537] RIP: 0033:0x45aff9
[  325.213948][ T8537] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  325.233673][ T8537] RSP: 002b:00007f3a9bda5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  325.242099][ T8537] RAX: ffffffffffffffda RBX: 00007f3a9bda66d4 RCX: 000000000045aff9
[  325.250208][ T8537] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000006
[  325.258187][ T8537] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[  325.266163][ T8537] R10: 0000000000000bb8 R11: 0000000000000246 R12: 00000000ffffffff
[  325.274319][ T8537] R13: 00000000000008a3 R14: 00000000004c9bd7 R15: 000000000075c07c
[  325.284039][ T8537] Kernel Offset: disabled
[  325.288545][ T8537] Rebooting in 86400 seconds..