[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. 2020/05/23 16:37:07 fuzzer started 2020/05/23 16:37:07 dialing manager at 10.128.0.26:40279 2020/05/23 16:37:07 syscalls: 3055 2020/05/23 16:37:07 code coverage: enabled 2020/05/23 16:37:07 comparison tracing: enabled 2020/05/23 16:37:07 extra coverage: enabled 2020/05/23 16:37:07 setuid sandbox: enabled 2020/05/23 16:37:07 namespace sandbox: enabled 2020/05/23 16:37:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 16:37:07 fault injection: enabled 2020/05/23 16:37:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 16:37:07 net packet injection: enabled 2020/05/23 16:37:07 net device setup: enabled 2020/05/23 16:37:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 16:37:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 16:37:07 USB emulation: enabled 16:41:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/170, 0x22}, {&(0x7f0000000540)=""/87}, {&(0x7f00000005c0)=""/173}, {&(0x7f0000000680)=""/4096}], 0x9f) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r7, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r6, 0x0) shutdown(r4, 0x0) syzkaller login: [ 294.822186][ T7070] IPVS: ftp: loaded support on port[0] = 21 16:41:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/254, 0xfe}], 0x1) recvfrom$inet(r0, 0x0, 0x2c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000340)={0x0, 0x37, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/99, 0x62}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)=""/139}, {&(0x7f00000005c0)=""/65}], 0x10}, 0x102) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r2, 0x0) [ 295.034705][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 295.173868][ T7186] IPVS: ftp: loaded support on port[0] = 21 [ 295.185824][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.213244][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state 16:41:03 executing program 2: wait4(0x0, 0x0, 0x88cac56025414d2f, &(0x7f0000000280)) [ 295.221069][ T7070] device bridge_slave_0 entered promiscuous mode [ 295.261947][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.269495][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.281168][ T7070] device bridge_slave_1 entered promiscuous mode [ 295.340406][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.368656][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.441558][ T7070] team0: Port device team_slave_0 added [ 295.467080][ T7070] team0: Port device team_slave_1 added [ 295.489756][ T7186] chnl_net:caif_netlink_parms(): no params data found [ 295.510813][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.520871][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.552686][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.594191][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.601168][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.634518][ T7325] IPVS: ftp: loaded support on port[0] = 21 16:41:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/170, 0xaa}, {0x0}, {0x0}, {0x0}], 0x4) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f00000003c0)=""/115, 0x67}], 0x10000000000000a8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r7, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r6, 0x0) shutdown(r4, 0x0) [ 295.664870][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.827731][ T7070] device hsr_slave_0 entered promiscuous mode [ 295.884130][ T7070] device hsr_slave_1 entered promiscuous mode 16:41:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000580)=""/219, 0xdb}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f00000003c0)=""/115, 0x67}], 0x10000000000000a8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r7, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r6, 0x0) shutdown(r4, 0x0) [ 296.011733][ T7374] IPVS: ftp: loaded support on port[0] = 21 [ 296.042517][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.049610][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.074945][ T7186] device bridge_slave_0 entered promiscuous mode [ 296.110512][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.120991][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.134666][ T7186] device bridge_slave_1 entered promiscuous mode [ 296.266003][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.329984][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.365767][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 296.400689][ T7445] IPVS: ftp: loaded support on port[0] = 21 [ 296.416293][ T7186] team0: Port device team_slave_0 added 16:41:05 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @random="188d3ea1dabc", @val, {@ipv6}}, 0x0) [ 296.473996][ T7186] team0: Port device team_slave_1 added [ 296.565296][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.572272][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.613060][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.635300][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.642264][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.669566][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.797581][ T7070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.837903][ T7070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.888414][ T7070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.996641][ T7186] device hsr_slave_0 entered promiscuous mode [ 297.042919][ T7186] device hsr_slave_1 entered promiscuous mode [ 297.112595][ T7186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.120378][ T7186] Cannot create hsr debugfs directory [ 297.134229][ T7374] chnl_net:caif_netlink_parms(): no params data found [ 297.146763][ T7070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.219000][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.226343][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.235763][ T7325] device bridge_slave_0 entered promiscuous mode [ 297.253901][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.260975][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.270546][ T7325] device bridge_slave_1 entered promiscuous mode [ 297.289253][ T7596] IPVS: ftp: loaded support on port[0] = 21 [ 297.360176][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.396066][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.487931][ T7325] team0: Port device team_slave_0 added [ 297.500162][ T7325] team0: Port device team_slave_1 added [ 297.565681][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.575511][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.586939][ T7374] device bridge_slave_0 entered promiscuous mode [ 297.598778][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.606763][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.615930][ T7374] device bridge_slave_1 entered promiscuous mode [ 297.624718][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.631659][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.658387][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.706631][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.714937][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.741859][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.775757][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 297.838521][ T7325] device hsr_slave_0 entered promiscuous mode [ 297.873006][ T7325] device hsr_slave_1 entered promiscuous mode [ 297.942530][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.950108][ T7325] Cannot create hsr debugfs directory [ 297.962983][ T7374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.022367][ T7374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.134632][ T7186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.177887][ T7374] team0: Port device team_slave_0 added [ 298.202940][ T7186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.237678][ T7374] team0: Port device team_slave_1 added [ 298.245670][ T7596] chnl_net:caif_netlink_parms(): no params data found [ 298.289511][ T7186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.349787][ T7186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.388324][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.395557][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.404086][ T7445] device bridge_slave_0 entered promiscuous mode [ 298.415722][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.422854][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.430736][ T7445] device bridge_slave_1 entered promiscuous mode [ 298.506220][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.513793][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.541447][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.576534][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.591884][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.601215][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.627720][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.641699][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.663240][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.745643][ T7374] device hsr_slave_0 entered promiscuous mode [ 298.792864][ T7374] device hsr_slave_1 entered promiscuous mode [ 298.832313][ T7374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.839892][ T7374] Cannot create hsr debugfs directory [ 298.863246][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.870314][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.880512][ T7596] device bridge_slave_0 entered promiscuous mode [ 298.896955][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.906570][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.920608][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.929861][ T7445] team0: Port device team_slave_0 added [ 298.959595][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.967322][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.975688][ T7596] device bridge_slave_1 entered promiscuous mode [ 298.999699][ T7445] team0: Port device team_slave_1 added [ 299.027177][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.036907][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.046040][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.053366][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.092887][ T7596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.121894][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.131880][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.141054][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.151341][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.158458][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.174607][ T7596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.195905][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.204003][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.231089][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.256448][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.265404][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.275378][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.287108][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.296049][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.305404][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.334736][ T7325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.394432][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.401403][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.427910][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.442025][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.470377][ T7596] team0: Port device team_slave_0 added [ 299.477857][ T7325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.538378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.547256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.571933][ T7596] team0: Port device team_slave_1 added [ 299.588085][ T7325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.635205][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.643725][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.665916][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.691942][ T7325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.726332][ T7070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.751511][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.759026][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.785950][ T7596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.800043][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.808129][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.835213][ T7596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.896062][ T7445] device hsr_slave_0 entered promiscuous mode [ 299.953451][ T7445] device hsr_slave_1 entered promiscuous mode [ 300.002499][ T7445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.010054][ T7445] Cannot create hsr debugfs directory [ 300.085244][ T7596] device hsr_slave_0 entered promiscuous mode [ 300.152638][ T7596] device hsr_slave_1 entered promiscuous mode [ 300.202423][ T7596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.209997][ T7596] Cannot create hsr debugfs directory [ 300.217884][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.229961][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.243057][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.265635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.274817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.308553][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.379794][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.394025][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.402777][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.409874][ T2765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.447977][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.457316][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.466952][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.476233][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.483373][ T2765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.506367][ T7374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.588450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.601464][ T7374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.658696][ T7374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.715540][ T7374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.786115][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.796474][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.805626][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.843726][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.853894][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.862783][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.871427][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.880925][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.934815][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.945414][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.954222][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.963702][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.972301][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.980625][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.999159][ T7070] device veth0_vlan entered promiscuous mode [ 301.037505][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.046578][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.058846][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.100831][ T7070] device veth1_vlan entered promiscuous mode [ 301.124446][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.131727][ T7445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.164352][ T7445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.241407][ T7445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.283250][ T7445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.341185][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.350062][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.358923][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.366961][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.386625][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.401115][ T7596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.470485][ T7186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.479271][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.487817][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.502113][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.510798][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.533123][ T7596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.597438][ T7070] device veth0_macvtap entered promiscuous mode [ 301.619654][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.627808][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.637803][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.647121][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.654270][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.663706][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.672514][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.681016][ T2725] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.688161][ T2725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.696305][ T7596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.755938][ T7596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.817275][ T7070] device veth1_macvtap entered promiscuous mode [ 301.845176][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.856696][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.866292][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.928195][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.937340][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.950854][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.982446][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.002358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.011489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.025387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.035944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.069615][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.094668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.106266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.115675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.125114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.135120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.144106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.153550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.163064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.174830][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.199674][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.233164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.247637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.256619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.268528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.294329][ T7186] device veth0_vlan entered promiscuous mode [ 302.309949][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.317942][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.394048][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.406295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.414926][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.489858][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.507026][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.556733][ T7186] device veth1_vlan entered promiscuous mode [ 302.576749][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.593293][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.604117][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.613464][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.620541][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.653708][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.713442][ T7596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.736553][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.755168][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.765661][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.775028][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.784459][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.791644][ T2765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.800348][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.813176][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.836582][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.880845][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.894893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.904495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.914194][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.923502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.932678][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.939750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.948203][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.957989][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.967221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.975656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.984445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.999833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.047014][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.057474][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.066859][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.074032][ T2686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.081808][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.090111][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.099573][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.108543][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.117266][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.125920][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.138634][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.146756][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.165231][ T7325] device veth0_vlan entered promiscuous mode [ 303.179479][ T7186] device veth0_macvtap entered promiscuous mode [ 303.190343][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.202226][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.216017][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.223163][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.232047][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.240631][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.249959][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.258823][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.267852][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.289197][ T7325] device veth1_vlan entered promiscuous mode [ 303.300403][ T7374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.313688][ T7186] device veth1_macvtap entered promiscuous mode [ 303.332651][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.342036][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.350006][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.358477][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.367037][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.377117][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.388415][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.398287][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.407370][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.416444][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.425142][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.434859][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.461272][ T7445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.476107][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.489509][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.500809][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 16:41:12 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) flistxattr(r3, &(0x7f0000000180)=""/102, 0x66) [ 303.510271][ T2725] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.517418][ T2725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.527667][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.553467][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.594635][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.606578][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.618620][ T8337] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.630585][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.696207][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.706531][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.714556][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.722236][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.731082][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.740317][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.753592][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.762322][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.780660][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.800434][ T7186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.811215][ T7186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.828607][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.840178][ T7325] device veth0_macvtap entered promiscuous mode [ 303.855868][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.867835][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.878694][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.888154][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.897357][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.906561][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.916922][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.931288][ T7325] device veth1_macvtap entered promiscuous mode [ 303.950802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.965617][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.044757][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.052348][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.059769][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.069010][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.084246][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.095746][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.105007][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.138197][ T7596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.185517][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.199132][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.209876][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.220526][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.233647][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.241030][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.250575][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.263813][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.275224][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.306633][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.317082][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.364137][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 304.401635][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:41:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000002000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac141400000000000000000000000000fc0200000000000000000000000000fbac1e0001000000000000000000000000ac1414bb000000000000000000000000000000000000000000000a00fe8000000000f38908953e6adee9dd238d000000000000000000bb00000000000000000000000000000040cc000000000000000000000000000000ff01000000000000000000000000000100"], 0xec}}, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x5160300, r3}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x6f, 0x2, 0x5, 0xffffffe0, 0x3, 0x6}, {0xc0000001, 0x1202, 0x6, 0xd4, 0x0, 0x6, 0x8000}, {0x80000000, 0x0, 0xc, 0x1b, 0x6, 0x8, 0x7}, {0x40000001, 0x8, 0x0, 0x8, 0x7fff, 0xffff, 0x3ff}]}) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xe) [ 304.411485][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 304.424427][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.442251][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.474503][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.487099][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.506039][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.517073][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.532026][ T7374] device veth0_vlan entered promiscuous mode [ 304.566483][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.580223][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 16:41:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000002000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac141400000000000000000000000000fc0200000000000000000000000000fbac1e0001000000000000000000000000ac1414bb000000000000000000000000000000000000000000000a00fe8000000000f38908953e6adee9dd238d000000000000000000bb00000000000000000000000000000040cc000000000000000000000000000000ff01000000000000000000000000000100"], 0xec}}, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x5160300, r3}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x6f, 0x2, 0x5, 0xffffffe0, 0x3, 0x6}, {0xc0000001, 0x1202, 0x6, 0xd4, 0x0, 0x6, 0x8000}, {0x80000000, 0x0, 0xc, 0x1b, 0x6, 0x8, 0x7}, {0x40000001, 0x8, 0x0, 0x8, 0x7fff, 0xffff, 0x3ff}]}) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xe) [ 304.621985][ T7596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.639192][ T7374] device veth1_vlan entered promiscuous mode [ 304.738876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.758469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 16:41:13 executing program 0: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8416, 0x20c49a, 0x0, 0x27) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @rand_addr=0x64010100}}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @mpls={[{0xfff, 0x0, 0x1}], @ipv4=@generic={{0x0, 0x4, 0x3, 0x21, 0x0, 0x66, 0x0, 0x7e, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, {[@timestamp_prespec={0x44, 0x0, 0xd1, 0x3, 0x5, [{@broadcast, 0x5f5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}, "212de21501259bbc5e5f1e3bc0fe9e3fa3e1c4b80e28d2eefe32c725fb23acf38a1a6be95f096320aac20fb25718b927a56db2472187ea551358b016b2db3714f53b042517dd9a99403e83b734a067073ded0c25574303caffd65f72e5d87dfc61cf4a968ff1ea2134b1a0338cb94c2c38aad553e620d3fa89629c58956f420e74701c261f6e2d173a974b3d68050a41335b13e68c51a12a89537c03b9967e9475a314fa8decb99e4976f434ca4d1ab0ea2b3e1deeda56ad87dc3fd25d0a2976ad2418fb26a6b6dd54f96296b40eaafb29ce4aa5de5289da"}}}, 0xffffffffffffff54) [ 304.784530][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.829700][ T7445] device veth0_vlan entered promiscuous mode [ 304.869893][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.879955][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.008731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.039853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 16:41:13 executing program 2: flock(0xffffffffffffffff, 0x1) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000007c0)={{0x0, 0x0, 0x80}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, 0x0) pipe(&(0x7f0000000000)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000000c0)) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xffffff80}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010001bbc43b208a021f82419f3b2c5e2", @ANYRES32=0x0, @ANYBLOB="2b03000000000000240012800b00010067656e657665000014000280060005004e23000005000a000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0802040025bf0000"], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1cc}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) [ 305.108163][ T7445] device veth1_vlan entered promiscuous mode [ 305.148586][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.171181][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.187852][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.210336][ T7374] device veth0_macvtap entered promiscuous mode [ 305.263205][ C1] hrtimer: interrupt took 33906 ns [ 305.417682][ T7374] device veth1_macvtap entered promiscuous mode [ 305.437546][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:41:14 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) signalfd4(r3, &(0x7f0000000180)={[0x80000]}, 0x8, 0x0) readlink(&(0x7f0000000300)='./bus\x00', &(0x7f0000000800)=""/4096, 0x1000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000002c0)=0x100000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0100002400290d0000000094c1000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x14c}}, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x80000]}, 0x8, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000340)) [ 305.468319][ T8380] device geneve2 entered promiscuous mode [ 305.580168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 305.597351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.610449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.626887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.638023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.678659][ T7445] device veth0_macvtap entered promiscuous mode [ 305.734925][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.760110][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.777449][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.788228][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.816439][ T7445] device veth1_macvtap entered promiscuous mode 16:41:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010011fff000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="0fff0000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB], 0x38}}, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80000, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={r5, 0x23, "82c8d53c2f86f8d6fc556f6b298109baaa8b9306e9f023baabbe2fb80c945df6c8d6d7"}, &(0x7f0000000040)=0x2b) [ 305.836708][ T7596] device veth0_vlan entered promiscuous mode [ 305.855211][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 305.875232][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.903122][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 305.944054][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.991475][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 306.011749][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:41:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x9, 0x2, {0xb, @sdr={0x2036315a, 0x7fff}}, 0xffffd52d}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x100, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 306.050613][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.087041][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.110114][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.135043][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.154604][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.194541][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.218041][ T8419] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:41:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000102010800000000000000490f0000003c0001802c00018014000300000000d088935e0a277f40000000002b10b32000ff0200000000000000000000000000010c000280040001000000000041160788bb9dcc3b3d2043304e501f83"], 0x50}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x8f, 0x9, 0x101, 0x9bc2, 0x8}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1b}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x3}, 0x14}}, 0x0) [ 306.264430][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.303851][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.375634][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.411778][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.427848][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.439678][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.450962][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.465781][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.487813][ T7596] device veth1_vlan entered promiscuous mode [ 306.497120][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.518432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.528126][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.541200][ T8428] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 306.579753][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 306.614021][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.626698][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.633008][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 306.652652][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.653969][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.668552][ T8428] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 306.686484][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 306.711739][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.722612][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 306.733499][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.762206][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.852309][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.860989][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.894829][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.906761][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.923991][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.935508][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.946731][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.957704][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.968097][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.978619][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.990061][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.002534][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.011266][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.106036][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.122816][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.153901][ T7596] device veth0_macvtap entered promiscuous mode [ 307.229710][ T7596] device veth1_macvtap entered promiscuous mode [ 307.355410][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 307.374215][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.404164][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 307.416444][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.434465][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 307.449469][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.463797][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 307.477710][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.490420][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 307.506211][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.518015][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.531745][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.540504][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.553714][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.564131][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.578619][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 307.589675][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.600696][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 307.613769][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.624156][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 307.635898][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.646367][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 307.657909][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.673444][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 307.684757][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.696929][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.738907][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.752152][ T2770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:41:16 executing program 3: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002100)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @private=0xc6120000}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r4, 0x2, 0x20, 0x40, 0x6}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)={r5, 0x8, 0xce, "3e1d4f1cc91ab2be71222da9595dc3bf51f83a979608fc7fc0b4d0de29b53f6b9991b5c98332aaf64b5af8b6ba550ef38cd8231262a32ee41f32a2e0799c8dd63edd5b33731bebb1b531ae6cc4efb5ee0005a4ee627576f0b63334ff597ab083187397d2fba69381e1b9aecafaa572fcd9fcfd1af872765d78843bd37156bfdbaaf0138e0020d07b4caa477e00db40d2513615176abe17ecff73347fc29d3ecfcf6d4a7ac4300c91fce5b4b888577e76837a9c2be96de36e3117f7e20f5fddd73fbb43a1b00aaeb01db03328ed0e"}, 0xd6) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) mq_getsetattr(r6, &(0x7f00000001c0)={0x7, 0xc3, 0x0, 0x1}, &(0x7f0000000200)) 16:41:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e6661740002", 0xd}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) 16:41:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x9, 0x2, {0xb, @sdr={0x2036315a, 0x7fff}}, 0xffffd52d}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x100, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:41:17 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000002c0)='.\x00', 0x500003e) syz_mount_image$nfs(&(0x7f0000000200)='nfs\x00', &(0x7f0000000240)='./file1\x00', 0x3ff, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000280)="1cb76eaf06bcf7d23bab0ca306f6849de3e7c197362bd90b72fb95cd9f48b76bf311b08a5e", 0x25, 0x10000}, {&(0x7f0000000400)="337faba89d1456bcd8d8986600c27e09e0cfe6654dc5e8992fcdb4ed610650d794c0d1981fda3987c9a56527ddc96f1d64106da01dc187f5edf2715e20d05aaab9fb4fa2342068fd97710868c921151347b65a598ed4b791cdb967f624a8f222fdaf918cfc5b96709cad8121b5ce29a13a580ca78aad1bd67e1c5564aadfe2baa031495d098b547eef4b8486ccd9d0eba39d332a608807e93e36cfffec50cc607f316831dba76fc87e713b9405676c7b9239eacaecee8995d30705d91c29cf22579dfd8b1e8b83ed3c88e353", 0xcc, 0x60}, {&(0x7f0000000500)="47c2ab859360ae0162fc3b46126da51dd2ffcac302f39d25a5c87447545f961b2977a506d0c4c67302031f9764bd345b8208c164cc503df39ac43942f33ad7", 0x3f, 0x641}, {&(0x7f0000000540)="fb16f744fe4148cfe08971fd0b1a1623c86f16c8afbe9b6872d0339d573c412c1d96af27b7e6ab5be3a2928491c5c6d8c2a68cdd08c9e26aa91c7cc4617efcee27069ed374d2eb12b5e549e56a57efd2b7023fa9bce449131e4c0f42e14f59a03e795799e194f92b4f2604a42a2f5a50c8804823700d66704f442384057e119da008884cee", 0x85, 0x8}, {&(0x7f0000000600)="6a3a01236f1442fc79d9fbf16488dba1dfe89e762d4ace8652c99d20aa9d7bc319e82a27f34e3fae5415ef5f79f1e1173f20264cfb79e0c27a3c1a12f5e3c8e2c80f8d9a575afaebd340a1a9147da5fd69528e75a906976ff1e61d94bdf2d9485715edef45b5dd15da0337083b613003418ed889036d9d9bb76d89f4bceb184933d6164bdf863b14fc6df14e8cd85bada817bd1d194c0cf9b07156d2944cdba698ec", 0xa2, 0xfc}], 0x7e1d896843b177e2, &(0x7f0000000740)='\x00') clone(0x800000, &(0x7f0000000300)="7d6212a992f51550eae275bfba2b7bcff89bda215d96e7843897ee642e5ae2821ba0d8cd3d6629c1c11f3e33eeed03499797acd4b2d71a4e532791c2a7790b3e221b9d969e5367b7f24be1230c793f3589b47f2def76932505f18a8cbd779183e02eb718b1f0f9ad0f0f1dab0d52bc16c3b69ea534ce38eb704fb65e898751a0a10a2e250dd9f6a6e89e8e823ec30867c3f0a494bafa8ad1c6379ca950ba3ede30b22a64336a02371f47e17d4771ca15bd1813236ead0971c6dd53f418dfd234bb13e5ef11e2510aca7e1d56b6176341ed", &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="d32d8e13f57e3f9332d2ad211d5d34afde99f45dbea5c0d3fb8c417ddb3a675ef14f033d23279c868778947a34428650277b42b2be7d764503adb8596f") r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 16:41:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x5160300, r4}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) prlimit64(r5, 0x1, &(0x7f0000000100)={0x6, 0x8}, &(0x7f0000000180)) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) recvmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000340)=@ipx, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/21, 0x15}, {&(0x7f0000000480)=""/122, 0x7a}], 0x3, &(0x7f0000000540)=""/143, 0x8f}, 0x0) r8 = socket(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000001c0)=0x1) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000000000a18516a22d48516716f31192b8129343a94385faa328e804f0765adae57dc7cf4874d17be1513684910ba4ec7fe122098f9fe06d7ef8190da16811fe8276e04bf97602d2dccbe575424ab2cf9d043a67188e2d5793dfe49fbefbb70f3c0a5e2dd2f73fc94a891ce078b23374a024c0c8f18630e57da8a79a95d5966c64ae5f302d8318eae4e982ae46e20425f95579551fb2", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000c0002000800070014000000"], 0x3c}}, 0x0) 16:41:17 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x24) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x0, {0x20}, 0x4, 0x0, r2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x1, 0x18, 0x1, 0x0, 0xff}}, 0xa0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x2}, {0x2, 0x6}], {0x4, 0x4}, [{}, {}, {0x8, 0x5}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r2}], {0x10, 0x1}, {0x20, 0x6}}, 0x6c, 0x3) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) fchdir(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x4442, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0xe00) iopl(0x0) 16:41:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/126, 0x7e}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x3, 0x0, &(0x7f00000001c0)='\x00\x00\x00', 0x0, 0x1, 0x0, 0xfffffc86, 0x0, 0x0, 0x0}, 0x40) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x410000, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000000c0)={0x18, 0x2, 0x7fffffff, 0xfffffffffffffffe}) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460608200304a2f098b20000000200030008000000280100001000000040000000020000000000000000000000000000000300380001000200050008000300000000000000000000000000000001000000000000000002000000000000050000000000000008000000000000000500000000000000e94a595f21ff7648493c3712f25a5be5083e20b6b3fa97a33547de945abc241c49f78982e261ca102a2197"], 0xa3) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) [ 308.452906][ T8483] FAT-fs (loop1): bogus number of reserved sectors [ 308.459678][ T8483] FAT-fs (loop1): Can't find a valid FAT filesystem [ 308.479464][ T29] audit: type=1800 audit(1590252077.197:2): pid=8479 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15784 res=0 [ 308.508152][ T8480] overlayfs: conflicting lowerdir path [ 308.519912][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 308.579683][ T29] audit: type=1804 audit(1590252077.287:3): pid=8479 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir270990177/syzkaller.Kj0DrN/2/file0" dev="sda1" ino=15784 res=1 [ 308.612263][ T8483] FAT-fs (loop1): bogus number of reserved sectors [ 308.618911][ T8483] FAT-fs (loop1): Can't find a valid FAT filesystem [ 308.625189][ T29] audit: type=1800 audit(1590252077.337:4): pid=8479 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15784 res=0 16:41:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x9, 0x2, {0xb, @sdr={0x2036315a, 0x7fff}}, 0xffffd52d}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x100, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 308.659302][ T29] audit: type=1804 audit(1590252077.367:5): pid=8479 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir270990177/syzkaller.Kj0DrN/2/file0" dev="sda1" ino=15784 res=1 16:41:17 executing program 4: mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x1045) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) signalfd4(r0, &(0x7f0000000180)={[0x80000]}, 0x8, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x5) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) writev(r3, &(0x7f0000003600)=[{0x0}, {0x0}, {&(0x7f0000000540)="f1", 0xfdef}], 0x3) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000005000/0x3000)=nil}) [ 308.745411][ T8492] overlayfs: conflicting lowerdir path 16:41:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "cfd1e49b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x14}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x7}, 0x7) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x5160300, r5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x6, 0x1001}, 0x0, 0x0, &(0x7f0000000800)={0x3, 0x2008, 0x7, 0x7ff}, &(0x7f0000000840)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=0x9}}, 0x10) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/nvme-fabrics\x00', 0x109000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180000e73200000000000000ff7f000018260000", @ANYRES32, @ANYBLOB="1d00000081000000dc6bf0ff1000000085100000faffffffeb7595000000000000000000", @ANYRES32, @ANYBLOB="0000000009008fdeadba00010000000095000000000000000a562400080000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xfffffff8, 0x7b, &(0x7f00000001c0)=""/123, 0x41100, 0x1, [], r3, 0x8, r1, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0x18000}, 0x10, r6, r7}, 0x78) r8 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r8, &(0x7f0000000540)=ANY=[], 0xfec8) recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4093, 0xffd}], 0x1}}], 0x1, 0x0, 0x0) 16:41:17 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000002c0)='.\x00', 0x500003e) syz_mount_image$nfs(&(0x7f0000000200)='nfs\x00', &(0x7f0000000240)='./file1\x00', 0x3ff, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000280)="1cb76eaf06bcf7d23bab0ca306f6849de3e7c197362bd90b72fb95cd9f48b76bf311b08a5e", 0x25, 0x10000}, {&(0x7f0000000400)="337faba89d1456bcd8d8986600c27e09e0cfe6654dc5e8992fcdb4ed610650d794c0d1981fda3987c9a56527ddc96f1d64106da01dc187f5edf2715e20d05aaab9fb4fa2342068fd97710868c921151347b65a598ed4b791cdb967f624a8f222fdaf918cfc5b96709cad8121b5ce29a13a580ca78aad1bd67e1c5564aadfe2baa031495d098b547eef4b8486ccd9d0eba39d332a608807e93e36cfffec50cc607f316831dba76fc87e713b9405676c7b9239eacaecee8995d30705d91c29cf22579dfd8b1e8b83ed3c88e353", 0xcc, 0x60}, {&(0x7f0000000500)="47c2ab859360ae0162fc3b46126da51dd2ffcac302f39d25a5c87447545f961b2977a506d0c4c67302031f9764bd345b8208c164cc503df39ac43942f33ad7", 0x3f, 0x641}, {&(0x7f0000000540)="fb16f744fe4148cfe08971fd0b1a1623c86f16c8afbe9b6872d0339d573c412c1d96af27b7e6ab5be3a2928491c5c6d8c2a68cdd08c9e26aa91c7cc4617efcee27069ed374d2eb12b5e549e56a57efd2b7023fa9bce449131e4c0f42e14f59a03e795799e194f92b4f2604a42a2f5a50c8804823700d66704f442384057e119da008884cee", 0x85, 0x8}, {&(0x7f0000000600)="6a3a01236f1442fc79d9fbf16488dba1dfe89e762d4ace8652c99d20aa9d7bc319e82a27f34e3fae5415ef5f79f1e1173f20264cfb79e0c27a3c1a12f5e3c8e2c80f8d9a575afaebd340a1a9147da5fd69528e75a906976ff1e61d94bdf2d9485715edef45b5dd15da0337083b613003418ed889036d9d9bb76d89f4bceb184933d6164bdf863b14fc6df14e8cd85bada817bd1d194c0cf9b07156d2944cdba698ec", 0xa2, 0xfc}], 0x7e1d896843b177e2, &(0x7f0000000740)='\x00') clone(0x800000, &(0x7f0000000300)="7d6212a992f51550eae275bfba2b7bcff89bda215d96e7843897ee642e5ae2821ba0d8cd3d6629c1c11f3e33eeed03499797acd4b2d71a4e532791c2a7790b3e221b9d969e5367b7f24be1230c793f3589b47f2def76932505f18a8cbd779183e02eb718b1f0f9ad0f0f1dab0d52bc16c3b69ea534ce38eb704fb65e898751a0a10a2e250dd9f6a6e89e8e823ec30867c3f0a494bafa8ad1c6379ca950ba3ede30b22a64336a02371f47e17d4771ca15bd1813236ead0971c6dd53f418dfd234bb13e5ef11e2510aca7e1d56b6176341ed", &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="d32d8e13f57e3f9332d2ad211d5d34afde99f45dbea5c0d3fb8c417ddb3a675ef14f033d23279c868778947a34428650277b42b2be7d764503adb8596f") r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 16:41:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xa012ed00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) wait4(r1, 0x0, 0x20000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x5160300, r3}) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x4a, &(0x7f0000000140)="d0de1d4514b17016710cc1c29814fa6d62ebb8282600b573c42ecf01ea53cda6645fe32efeffffffffffffff7143bdb9957316c88aa909000000000000000c216250f2f6b30465e37684"}}], 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000019600)={&(0x7f0000019400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000195c0)={&(0x7f0000019440)=@delsa={0x144, 0x11, 0x4, 0x70bd28, 0x25dfdbfd, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x0, 0xff}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @algo_aead={0x78, 0x12, {{'ccm-aes-ce\x00'}, 0x160, 0x60, "d1d3a26bbc7138ef5f6ef27c7de6037eef8cafe9c147d152a8f9bf907dc3da51f1397c70900668c1d49cb662"}}, @migrate={0x9c, 0x11, [{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x17}, @in=@multicast2, 0xff, 0x4, 0x0, 0x3506, 0xa, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in6=@empty, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x32, 0x3, 0x0, 0x0, 0x2, 0xa}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x4805) ptrace$setregs(0xd, r0, 0x5, &(0x7f00000193c0)="049313040000") bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @mcast1, 0x8}, 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 16:41:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202100, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfff, 0x20080) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) signalfd4(r2, &(0x7f0000000180)={[0x80000]}, 0x8, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x743900) 16:41:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x9, 0x2, {0xb, @sdr={0x2036315a, 0x7fff}}, 0xffffd52d}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x100, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 309.209125][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 309.209419][ T8528] overlayfs: conflicting lowerdir path 16:41:18 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000020700000000000000050000000064c728df07800800094000e900001800028014"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280004001c00010da017e700000011000208716901000000"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2840000014"], 0x1}}, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000600ffffffff000000000c0001"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', r3}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1}, 0x14) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 16:41:18 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="a4d3e3884da76a5b19fefd397a91e5488b310e53272d2a8e65c4a01775", 0x1d, 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 309.437774][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 16:41:18 executing program 5: socket(0x400020000000010, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x32f}) write(r0, &(0x7f0000000040)="1800000070000d0000000080fc07ff1b07043db304102000", 0xa4) [ 309.497947][ T8560] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 16:41:18 executing program 0: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x8}, 0x293, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000000000600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020007797a30000000000900010073797a300000000008000340020000000900020070bc7a300000000004008480040004800800034000000008"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0xffff, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x3, 0xfffffd9a, 0xb0b0b0b0}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x241, &(0x7f0000000080)={0x0}, 0x8}, 0x0) [ 309.544777][ T8560] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 16:41:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x32f}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x101, 0x3, 0x4, 0x8, 0x2, {r3, r4/1000+60000}, {0x4, 0xd, 0x1f, 0x83, 0x9c, 0x1f, 'btFA'}, 0x6, 0x1, @offset=0x7f, 0x0, 0x0, r5}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x16e}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4da}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x64f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "f39d57c1a3f625"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x720}]}, 0x58}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x48, r7, 0x2c36067bb6bc0ed7, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "38998921fe1bff5c3294393bcd"}, @NL80211_KEY_SEQ={0xb, 0x4, "6f0da38654d328"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040000}, 0x4004090) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xff7cff40f825d397}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 16:41:18 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000180)=@tipc, 0x80, 0x0}}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0xc07, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44841}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xdc, 0x0) [ 309.653473][ T8560] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 309.667150][ T8560] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 16:41:18 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000041000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c00f3235008000000f30660f38f8a90a0000003e0f07", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x32f}) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r4, &(0x7f0000000600)=0x8, 0x12) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f90000082505a8a4070000000001090224000101"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "6beab25e5d747a6c3de2ca71c0c6dad82e42099897937d6106cac90653b0d696a563d1b2724d8833ad3fddcbd3ecea0c25a616debbb6d1fa7c9f39285888dc2ddb6f707ac60100e0af357c431ff3c54e08bc9174e6d03cd4a671569e7498971c9eaa7acd65e8101cc920b02f82e1a4c5502edf233934ad68d5ff2b81703b1d000c1742997d4c8e5d84d0a0ba4e73d753249e3f7db174ac6c"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000400)={0x0, 0x11, 0xd5, "6971c834cecc9c0be3341749a35e0e41c689147f3056676c13a9469a777b4c74d623c5a46b62682c1b0754aa33e1ba3e57d532d69b12a28a3ab4acbc1c9bc46e4f6dabc711da700fd77c3e5132aea2399ad438ab7bdb356d6960fcb4463e142c23cbff9319ffd70d6058387675a53f122ec1704b25500112c889959ba7d2f7e5aba403637fc7427994912cc83552600517087dd6927cb843df57efc73ce35ffd06a7ecf71d60ddb8acbd82c843060430b73046da2db39908250e76b84f50ad5e3ddee29c6e90d4a2633c89ccb9e713c06c0352fbb1"}, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x4a, {0x48, "4417782c423f8ff26092dbac109dee1fc011670545676eba8e38e63fa3545f8e6369c3df906e34de0c4b1c131f17f6280cd6c6788e90fb923f45a7e4f8c865f8655914cd2477a333"}}, &(0x7f0000000180)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7f}}) 16:41:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17890efaee5eab7ff8a8cdc21ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0b56bfe6508ebb3c4631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee41f5b2e7b91c61ccd1df673896450f859ce8122a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d4524847d2638da3261c8362bb7c7824be6195a66d2e17e122040e11"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x7f, 0x4}, {0x100}], r3}, 0x18, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000440)=0x8000, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0xff8a}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xa8, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x77af}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xad89}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xbad5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x4090) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16:41:18 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080), 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x10001, 0x30}, &(0x7f00000001c0)=0xc) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x5160300, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x440202) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) getsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020401", 0xf}], 0x0, 0x0) 16:41:19 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) signalfd4(r3, &(0x7f0000000180)={[0x80000]}, 0x8, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000240)={0x1, @capture={0x1000, 0x0, {0x100, 0x59}, 0x895, 0x1ff}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) [ 310.265219][ T8587] FAT-fs (loop5): bogus number of FAT structure [ 310.286501][ T8587] FAT-fs (loop5): Can't find a valid FAT filesystem 16:41:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x500a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180), 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x658a8000, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf595, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x3, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x32f}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a305ecd4fe7fcdc43aa4626c2b97cd6caf11426cba5595ec2419cbad8b1711cb4d3dc08367abe393d07e2acb294bd2154c41b92efb63a575a845d03fddd669e9c9cd1f73c94e450ea1d36c80818558a42a0f08aa9baab94385a3eeb3a36284a6a13e20e1b4df30b63e64c8ef1bc9ca832d65e4e0d8d7451dee9297423029e0a1df380000553b9f31de2001136e3136021c680a2373d563be8d485775ba4bb0a6240060ebb2a360d936b11fa6f5f439f9b4cc4b3c7626958167a4f8823a998e6a51a6765534f7455a04bc0"], 0xcd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 310.448450][ T8587] FAT-fs (loop5): bogus number of FAT structure [ 310.458391][ T8587] FAT-fs (loop5): Can't find a valid FAT filesystem 16:41:19 executing program 5: r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6e, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x80}, 0x42000}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x6, &(0x7f00000004c0)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1}]) signalfd4(r1, &(0x7f0000000180)={[0x80000]}, 0x8, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xe) 16:41:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000100)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="4800000010000f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048004}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x34, 0x2, 0x5, 0x3, 0x6, 0x0, 0x2cf, 0x38, 0x119, 0x4, 0x6, 0x20, 0x2, 0x30, 0x2, 0x6}, [{0x7, 0x3b, 0x4676, 0x8, 0x7dc23f9c, 0x7, 0x5, 0x81}, {0x4, 0x5, 0x5, 0x4ff3, 0x9, 0x0, 0x6, 0x1}], "ce581dd2797734d7bbb8052bee9d480696bc2c48086f2f881c7d7fa55be81d7b035a4ac05091aa4a4c4f0835f481233bae3bdb62b2ec53d60711c6fb614b7e1a0e4adfbbac17f1a86f12a9d4a8ccd83c892e4c99427b2c", [[], [], [], [], [], [], []]}, 0x7cf) dup2(r0, r1) [ 311.011235][ T8613] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 16:41:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x500a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180), 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x658a8000, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf595, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x3, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x32f}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a305ecd4fe7fcdc43aa4626c2b97cd6caf11426cba5595ec2419cbad8b1711cb4d3dc08367abe393d07e2acb294bd2154c41b92efb63a575a845d03fddd669e9c9cd1f73c94e450ea1d36c80818558a42a0f08aa9baab94385a3eeb3a36284a6a13e20e1b4df30b63e64c8ef1bc9ca832d65e4e0d8d7451dee9297423029e0a1df380000553b9f31de2001136e3136021c680a2373d563be8d485775ba4bb0a6240060ebb2a360d936b11fa6f5f439f9b4cc4b3c7626958167a4f8823a998e6a51a6765534f7455a04bc0"], 0xcd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16:41:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000100)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="4800000010000f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048004}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x34, 0x2, 0x5, 0x3, 0x6, 0x0, 0x2cf, 0x38, 0x119, 0x4, 0x6, 0x20, 0x2, 0x30, 0x2, 0x6}, [{0x7, 0x3b, 0x4676, 0x8, 0x7dc23f9c, 0x7, 0x5, 0x81}, {0x4, 0x5, 0x5, 0x4ff3, 0x9, 0x0, 0x6, 0x1}], "ce581dd2797734d7bbb8052bee9d480696bc2c48086f2f881c7d7fa55be81d7b035a4ac05091aa4a4c4f0835f481233bae3bdb62b2ec53d60711c6fb614b7e1a0e4adfbbac17f1a86f12a9d4a8ccd83c892e4c99427b2c", [[], [], [], [], [], [], []]}, 0x7cf) dup2(r0, r1) [ 311.389412][ T8623] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 16:41:20 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00002006000000f6002788e600000000000000", @ANYRES32=0x0, @ANYBLOB="14000200ff020002ff"], 0x3}}, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000002c0)={0x6, 0x1}) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000280)={0x0, 0x16}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000480)=[0x2, 0x850], &(0x7f00000004c0)=[0x19, 0x2, 0x1, 0x6, 0x1, 0x0, 0x8, 0x50c3, 0x3, 0xfffffffb], 0x13, 0x9, 0x0, &(0x7f0000000500)=[0x81, 0x800, 0x200, 0x6, 0x12, 0x6, 0x7f, 0x8000, 0x4], &(0x7f0000000540)=[0xff, 0x7c3e, 0x8, 0x1f, 0xfffffff8, 0x0, 0x800, 0xc902, 0x200]}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, [], 0x1}, @in=@multicast2, 0x4e22, 0x40, 0x4e21, 0x899c, 0x14, 0x80, 0xa0, 0x88, r7, r8}, {0xca, 0x100000000, 0x5, 0x2000000, 0x2, 0x7, 0xf69, 0x7ff}, {0x0, 0x1f, 0x1, 0xffffffffffff0001}, 0x3, 0x6e6bba, 0x1, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d5, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x22}, 0x3501, 0x2, 0x2, 0x5, 0x3, 0x2, 0xfffffff7}}, 0xe8) [ 312.021070][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 312.281146][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 312.425955][ T12] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.480873][ T12] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 312.489873][ T12] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 312.600933][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.989419][ T3320] usb 5-1: USB disconnect, device number 2 16:41:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x32f}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x101, 0x3, 0x4, 0x8, 0x2, {r3, r4/1000+60000}, {0x4, 0xd, 0x1f, 0x83, 0x9c, 0x1f, 'btFA'}, 0x6, 0x1, @offset=0x7f, 0x0, 0x0, r5}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x16e}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4da}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x64f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "f39d57c1a3f625"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x720}]}, 0x58}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x48, r7, 0x2c36067bb6bc0ed7, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "38998921fe1bff5c3294393bcd"}, @NL80211_KEY_SEQ={0xb, 0x4, "6f0da38654d328"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040000}, 0x4004090) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xff7cff40f825d397}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 16:41:22 executing program 2: socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x0, 0x42) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x1e}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}]}}}]}, 0x4c}}, 0x0) 16:41:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfe}, 0xe80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = gettid() r2 = epoll_create1(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54140000001000010400000000000000000000000090a672f3f157ade77246337fe42fc79703a7b964f67dc3dd717e1d53b7937a74702cb8ce083289af091d7b7ca40991ff66a9cbd0705e3d6950aaa63f8f0b8828ebb86357e9bf7a6882bab59c5bd485f8bd883743da05e841fd1ff06b063ca02c7408b06ac457b28953fdb5baa8a64799c423130e125a31d72f166493192db1ff163c475b4f56870299be6a272392f792dddcac4672", @ANYRES32=0x0, @ANYBLOB="2b03000018100000240012800b00010067656e6576650000140002800800010004000000050009000000000008001300", @ANYRES32=r1, @ANYBLOB='\b\x00\r\x00\b\x00\x00\x00'], 0x54}}, 0x20000000) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x8000, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x5160300}) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f00000001c0)=0xba37) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000240)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$ax25(r6, 0x0, &(0x7f0000000180), 0x80000) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) pipe(&(0x7f0000000000)) 16:41:22 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0xfffffff8) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="4b0000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1450a8149d49b8fa300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010097e1989821c1c82fcb74e746ac88b61736f1d7112f483a3ba3644bef0daf956fdd3e0c8a3c03bf79e6386cc5d4325e252d7e3042983843de80fa113659b13ec321b9d492c55ba11c2eeeddd1ed74639ff2d47941177d9e0e803df177a129d31c22eae1c502dd2c0d2a67bf65d77ad6e36f7116343b62f3875c7b66795dfc17b497"]}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x5160300, r3}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x5160300, r5}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) 16:41:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0xb2, 0x1a, &(0x7f00000001c0)={0x77359400}) 16:41:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x32f}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x101, 0x3, 0x4, 0x8, 0x2, {r3, r4/1000+60000}, {0x4, 0xd, 0x1f, 0x83, 0x9c, 0x1f, 'btFA'}, 0x6, 0x1, @offset=0x7f, 0x0, 0x0, r5}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x16e}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4da}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x64f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "f39d57c1a3f625"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x720}]}, 0x58}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x48, r7, 0x2c36067bb6bc0ed7, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "38998921fe1bff5c3294393bcd"}, @NL80211_KEY_SEQ={0xb, 0x4, "6f0da38654d328"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040000}, 0x4004090) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xff7cff40f825d397}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 16:41:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2}) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 16:41:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0xb2, 0x1a, &(0x7f00000001c0)={0x77359400}) 16:41:22 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@datasec={0x0, 0x1, 0x0, 0x6, 0x1, [{}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '\x00\x00\x00'}]}}, &(0x7f00000001c0)=""/262, 0x42, 0x106, 0x8}, 0x20) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000b1408002dbd7000fddbdf25080003000300000008003f7c1af37d2485370000000000"], 0x20}}, 0x4014) [ 313.855204][ T8693] BPF:[1] ENUM (anon) [ 313.876220][ T8693] BPF:size=1 vlen=1 [ 313.915744][ T8693] BPF: [ 313.932718][ T8693] BPF:Invalid name [ 313.954547][ T8693] BPF: [ 313.954547][ T8693] 16:41:22 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r3, 0xe50, 0x8}, &(0x7f00000000c0)=0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000003c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0) sendfile(r6, r5, 0x0, 0x100000001) [ 314.033079][ T8692] BPF:Invalid string section 16:41:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 314.161700][ T29] audit: type=1804 audit(1590252082.887:6): pid=8702 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir777284190/syzkaller.z5WiL7/8/cgroup.controllers" dev="sda1" ino=15819 res=1 16:41:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) 16:41:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000000c0)=@netrom={'nr', 0x0}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000b6989cd372a", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}}]}, 0x68}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 16:41:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x40, 0x104282) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x3cca0e83cbffb5fa, &(0x7f0000000080)=0xda, 0x4) 16:41:25 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)='overlay\x00', 0x12020, &(0x7f0000000100)=ANY=[@ANYRES16]) chdir(&(0x7f00000002c0)='./bus\x00') close(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0cffffe5", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000001800038008000400cfd1e49b080002001400000004000100"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)={0x0, 0x10000, 0x3, &(0x7f0000000040)=0xf18}) 16:41:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00df05e5ff00", @ANYRESOCT], 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0xf40}, 0x8) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x5160300, r3}) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f00000002c0)) 16:41:25 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c80) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8918, &(0x7f0000000100)={'caif0\x00', {0x2, 0x3, @empty}}) 16:41:25 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x12, 0x10, 0xfa00, {&(0x7f00000004c0)}}, 0x18) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x2c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x20, 0xf3, 0xfc, 0x4, 0x0, 0x1, 0x200}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10044010) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "cfd1e49b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x14}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x16e}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4da}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x64f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "f39d57c1a3f625"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x720}]}, 0x58}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 316.399282][ T8739] IPVS: ftp: loaded support on port[0] = 21 [ 316.423380][ T8741] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.466295][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.537201][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.549833][ T29] audit: type=1800 audit(1590252085.277:7): pid=8771 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15842 res=0 16:41:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @broadcast}, &(0x7f00000000c0)=0xc) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 16:41:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000140)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x20) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x5160300, r3}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000580)={0x1e6, 0x7, &(0x7f0000000180)}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 16:41:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x478, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3f}, @ETHTOOL_A_LINKMODES_OURS={0x438, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x45, 0x5, "d8bfa29979d8fe89c527044c60056a2d9115cafe2b20f77610da37810b4a1a1d5e5cac3b7e1ad9dfdbd82664b598e8bdf56726b475d9e8f7bff43e6d863d485cbb"}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "b8e3b48b01741b2ed94110f75a59648a246b969246e9574487cbd42b489f30d16b87c91213dc42c5b713e6fd8bd40ffb3bb187a09797db5c9f31e5c061b3e2c9f5872a836f671113125f229e28d07c0144a65030ebc1f26ad15ba6b5f0abd0dfafce514a165c01e7a1b9977a8b8cf7973e67f9646dcbbba8921e00977ff677be2a209dac44ffce016db2e0a45bd977a7b98809"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'eth1}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, ',GPLproc+!]md5sum:vmnet1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x414}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'eth1}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x214, 0x3, 0x0, 0x1, [{0x15c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x73, 0x2, '@\x991\xbf\xc8`\xf3\xac\xc7[\xe1@(\x85\x1d\x01ES<\\\xe8\xe1x\xe6\xbf\xfd\x88\x829\xa6\xbf=\x98\xb3\xb5\xff\xe4\xff\xcaj4\x85Wp\xee\xea}\x83,\xd5QE\xaa_\xe3\xb2_\xfb\xdf\xfa\xfc\xfb\x9a1\xd8\xc3\xd0)\xfaE\xff& \x16\xe4{\x89\n\x10\xc3\b~\xd3`b\x06\xc9^\x93P\xd0%\x829I!\xda\x82\x00U\xfa\xbf\xb5\x9a\xc4#\xddBF\x8a\xab'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc1, 0x2, 'L\xea\x00\xbeL\x02\x18\xa4\x02\xea\xe7o\xde\xad\x11\xca\x98\x06p\xac\xf3\x8aEez\xb4k`r\xcb\xc8\xaf\xd3\xde4&\xa4P0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0102000000000300"/18, @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl(r0, 0x8b27, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x93}]}, 0x2c}}, 0x800) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r9, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16:41:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) socketpair(0x29, 0x0, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x69) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000), 0x2) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) 16:41:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x89}, 0x20) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) openat$full(0xffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000a80)=""/4096) munlockall() syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0xc0, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x3, 0x7d, 0x8, 0x18, 0x7f}, 0x3a, &(0x7f00000002c0)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x9, 0x4, 0x46, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x0, 0xff0f, 0x7, [0x0, 0xc000, 0xffc000, 0xff0000, 0xff0000, 0xc0]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x52, &(0x7f0000000300)=@string={0x52, 0x3, "95d244d25947ea1ae159d204a758745e5f8a50bbc87e2dde588026615a593d1dbf53b3d4453962ce586eff2819916784b5c24f51d5615dc5dc9b42d7c80132acdca896543710e6fa0e7e0e494c4a09d9"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_usb_control_io$printer(r4, &(0x7f00000004c0)={0x14, &(0x7f00000005c0)={0x20, 0x1, 0xec, {0xec, 0x4, "da85202801880cb98a6cbe895d773647fb1cfc4cf70c8884b21fada1d051fa709b1638280b712a66fe165f620320e15842ff3b25ac901aa349922a8562b2b9ce2f78b74c1c2408ea3e1ee4f057aac27df8bf063c7e5bffd278ae0ac95774b87eb5b9ec187d4e7f50c54bca6324ea5018fadda0983ecb6d2e7ad3106a447fc0c0843a8ab318a10f88d073ac09b808c4a8dfc402153cedf86d932f81892ab51e092b7a87f382f1db94f9f99617411f0d6ac7c1678d41789295fa2045d074dc1902db44bd86ad2dd9f22849f287e651de8ec2fda5bc2474e68d5977349c576e395d521b1450369a4c352a9f"}}, &(0x7f00000006c0)={0x0, 0x3, 0x91, @string={0x91, 0x3, "193df0e37991139ac044eecd54885eff5d3fbe636032c827bc7395f645e20c40192076708e1f64566910aca6c7442e3be2dee93281a33d1a64f4bcb044c62376de6f374731878ad2d7322b9bed820575bc11151cc9525fd286e3242ed3880c9dc3d1d89a34af9a6e64f6fe98d60e91c077a926d630f587832650ca7816c88f6820dfcddf6f4aa4a0fe95ade94def16"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000780)={0x20, 0x19, 0xbb, "ca58cdea3a96b8cd9def992c1f6a4d1c253f077cd1e3c09274b87564c178df3c73157fbeea90407482d48a4b4b9fafe014ec4a8f988cd879771bb55b650a0d9f40d583900696f781ac243ad748746006cfff030f8ec8e62b7cdbf4cccd99e8a2d7dccf6479a4b65001ba8a4266246cf1c428b3f4e2f32f4416e6e6efe2b51f8f0f39c28f8d0458b66cbe4615b81cc1b6cba89e055e65e81ef5f2114d07e71baf82ecea768a37b739acf619eeada4377626601b0a9045c942dda6f0"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x0, 0x7c, {0x7a, "f4047848f1009cbcbc54f8d0b487f64d45d9bc94a672ce3d7e0c3545fe6b4868c3ff033618f6eae1740a9f15f410ec6ed16fd8e0a353ed409a17fa7cd63a436d7d5f28f8f053e67dd5d579b49cbef4995ba9182a5459a49a074e4a91ca5bcb2d2ee37632cb54f164fe0fb0db0bd7a6bfda64457d507852b8b8bd"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000a00)={0x20, 0x0, 0x1}}) [ 317.026692][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 317.179947][ T8739] IPVS: ftp: loaded support on port[0] = 21 16:41:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) connect$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x24) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xd4}, 0x8000) sched_rr_get_interval(r4, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300ecf32ef0f750b50f012a163066b9690200000f3266b99f0000400f3266654766b8004000000f23c80f21f866350800a0000f23f8b82b008ed80f01bd0050", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000000000000000a0000000000000000000000dc098ea50079c7f737d01de807ed7043d1b27633853ac4bc"], 0x1c}}, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:41:26 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x10400, 0x169) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800402c0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x12, 0x1, '/dev/snapshot\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x348c0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e28, 0x3a, @ipv4={[], [], @empty}, 0x3f}, {0xa, 0x4e26, 0xffffffff, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xce21, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0xfffffffc]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x23) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) [ 317.660684][ T2770] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 317.726111][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:41:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000140)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x20) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x5160300, r3}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000580)={0x1e6, 0x7, &(0x7f0000000180)}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 317.792323][ T8862] IPVS: ftp: loaded support on port[0] = 21 [ 317.920500][ T2770] usb 5-1: Invalid ep0 maxpacket: 16 [ 317.930163][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 318.070387][ T2770] usb 5-1: new low-speed USB device number 4 using dummy_hcd 16:41:26 executing program 3: r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x4, 0x9, 0x2, 0x3342}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x5160300}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) tkill(r1, 0x1e) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x60) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') [ 318.132415][ T7] tipc: TX() has been purged, node left! [ 318.225223][ T8862] IPVS: ftp: loaded support on port[0] = 21 [ 318.226643][ T8840] kvm: emulating exchange as write [ 318.310675][ T2770] usb 5-1: Invalid ep0 maxpacket: 16 [ 318.317356][ T2770] usb usb5-port1: attempt power cycle 16:41:27 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x7fffffff, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmUde=\x000000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x2, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, ',['}}, {@dont_hash='dont_hash'}]}}) 16:41:27 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr, 0x15, 0x0, 'wrr\x00', 0x1, 0xfffffc01}, 0x2c) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2, 0x0, 0x0, 0x400000000000000}) write$capi20(r1, &(0x7f0000000000)={0x10, 0xffff, 0x3, 0x80, 0x347, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = getpid() prlimit64(r3, 0xc, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) [ 318.804440][ T8922] fuse: Bad value for 'fd' 16:41:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000000002e0000000008001c00ef000000"], 0x28}}, 0x0) [ 318.907424][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.969946][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.043332][ T8922] fuse: Unknown parameter 'subj_user' [ 319.067670][ T8934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.089955][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.101000][ T2770] usb 5-1: new low-speed USB device number 5 using dummy_hcd 16:41:27 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr, 0x15, 0x0, 'wrr\x00', 0x1, 0xfffffc01}, 0x2c) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2, 0x0, 0x0, 0x400000000000000}) write$capi20(r1, &(0x7f0000000000)={0x10, 0xffff, 0x3, 0x80, 0x347, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = getpid() prlimit64(r3, 0xc, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) 16:41:27 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr, 0x15, 0x0, 'wrr\x00', 0x1, 0xfffffc01}, 0x2c) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2, 0x0, 0x0, 0x400000000000000}) write$capi20(r1, &(0x7f0000000000)={0x10, 0xffff, 0x3, 0x80, 0x347, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = getpid() prlimit64(r3, 0xc, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) [ 319.200753][ T2770] usb 5-1: Invalid ep0 maxpacket: 16 [ 319.360292][ T2770] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 319.470625][ T2770] usb 5-1: Invalid ep0 maxpacket: 16 [ 319.476339][ T2770] usb usb5-port1: unable to enumerate USB device 16:41:28 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr, 0x15, 0x0, 'wrr\x00', 0x1, 0xfffffc01}, 0x2c) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2, 0x0, 0x0, 0x400000000000000}) write$capi20(r1, &(0x7f0000000000)={0x10, 0xffff, 0x3, 0x80, 0x347, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = getpid() prlimit64(r3, 0xc, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) [ 319.863871][ T8922] fuse: Bad value for 'fd' [ 319.889728][ T8922] fuse: Unknown parameter 'subj_user' 16:41:28 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4f118eb25", @ANYRES32=0x0, @ANYBLOB="1d1d0a2e3f166b8231f58e39c3a2b6b685d6d2f82519a63f989faf9a815ec6d0c059d797193f18dca1949877ef3f5df883453a598baeff998211ef168828"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) 16:41:28 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr, 0x15, 0x0, 'wrr\x00', 0x1, 0xfffffc01}, 0x2c) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2, 0x0, 0x0, 0x400000000000000}) write$capi20(r1, &(0x7f0000000000)={0x10, 0xffff, 0x3, 0x80, 0x347, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = getpid() prlimit64(r3, 0xc, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) 16:41:28 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) prlimit64(r0, 0x3, &(0x7f0000000280)={0x9, 0x204}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000240)=0x7, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x400, 0x0, 0x1000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) dup2(r2, r4) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f0000000200)) 16:41:28 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x5160300, r1}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0xffff0001, 0x1000, "08c1979ffb9d26383377c0bcca402e4a983115a1cf1fe83b", {0x10000, 0x7fffffff}, 0x1}) clock_gettime(0x5, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x0, 0x2, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x1000000001c, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105518, &(0x7f0000001000)) 16:41:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, 0xffffffffffffffff, 0x0) socket(0xf, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinrx\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001640)=ANY=[]}, 0x1, 0x0, 0x0, 0x24000004}, 0x200000c4) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) socket$netlink(0x10, 0x3, 0x12) 16:41:29 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x423}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000900010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 16:41:29 executing program 3: open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='\x00', 0x41841, 0x180) write$evdev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x4a0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x5160300, r2}) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x0, 0x7, 0x0, 0x0, {0x3, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newlink={0xc8, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x5c, 0x1a, 0x0, 0x1, [@AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x3}, {0x8, 0x0, 0x0, 0x0, 0xde8b}, {0x8, 0x10, 0x0, 0x0, 0x1}, {0x8, 0xe, 0x0, 0x0, 0x7fff}, {0x8, 0x3, 0x0, 0x0, 0x2}, {0x8, 0x8, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xe, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x0, 0x3f4}]}}]}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, @IFLA_MAP={0x24, 0xe, {0x3, 0xfffffffffffffffe, 0x0, 0x7fd, 0x4, 0x40}}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0xc8}, 0x1, 0xc00000000000000}, 0x20004000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000004c0)={0xffff, 0x800, 0x2, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x1, "212aebb9640b6493ed7565d9a6725f77"}) 16:41:29 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x1, 0x4, 0xf3, 0x9, r2}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000600ffffffff000000000c0001"], 0x40}}, 0x0) sendmsg$xdp(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, 0x0, r5, 0x3c}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="2bfcb1fcbd5d", 0x6}], 0x1}, 0x40) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 320.759676][ T29] audit: type=1800 audit(1590252089.478:8): pid=8982 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15859 res=0 [ 320.782653][ T8956] syz-executor.5 (8956) used greatest stack depth: 23112 bytes left [ 320.837074][ T8987] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 320.888480][ T8982] ================================================================== [ 320.897445][ T8982] BUG: KASAN: null-ptr-deref in get_block+0x657/0x1380 [ 320.904498][ T8982] Write of size 8 at addr 0000000000000000 by task syz-executor.3/8982 [ 320.912934][ T8982] [ 320.915294][ T8982] CPU: 1 PID: 8982 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 320.925505][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.936228][ T8982] Call Trace: [ 320.940100][ T8982] dump_stack+0x188/0x20d [ 320.948119][ T8982] ? get_block+0x657/0x1380 [ 320.953038][ T8982] __kasan_report.cold+0x5/0x38 [ 320.957995][ T8982] ? get_block+0x657/0x1380 [ 320.962532][ T8982] ? get_block+0x657/0x1380 [ 320.967496][ T8982] kasan_report+0x33/0x50 [ 320.971847][ T8982] check_memory_region+0x141/0x190 [ 320.977296][ T8982] get_block+0x657/0x1380 [ 320.981877][ T8982] ? block_to_path.isra.0+0x300/0x300 [ 320.987587][ T8982] ? mark_buffer_write_io_error+0x180/0x180 [ 320.994306][ T8982] ? create_empty_buffers+0x590/0x8c0 [ 321.001002][ T8982] ? __alloc_pages_nodemask+0x5f4/0x810 [ 321.006633][ T8982] ? do_raw_spin_unlock+0x171/0x260 [ 321.011866][ T8982] minix_get_block+0xe5/0x110 [ 321.016917][ T8982] __block_write_begin_int+0x490/0x1b00 [ 321.022833][ T8982] ? minix_rename+0x8c0/0x8c0 [ 321.027888][ T8982] ? remove_inode_buffers+0x1c0/0x1c0 [ 321.033442][ T8982] ? pagecache_get_page+0x204/0xa10 [ 321.038922][ T8982] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 321.045512][ T8982] ? wait_for_stable_page+0x11c/0x1e0 [ 321.051442][ T8982] ? minix_rename+0x8c0/0x8c0 [ 321.056576][ T8982] block_write_begin+0x58/0x2e0 [ 321.061937][ T8982] minix_write_begin+0x35/0xe0 [ 321.067131][ T8982] generic_perform_write+0x20a/0x4e0 [ 321.072772][ T8982] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 321.082135][ T8982] ? update_time+0xc0/0xc0 [ 321.086777][ T8982] ? down_write+0xdb/0x150 [ 321.091313][ T8982] __generic_file_write_iter+0x24c/0x610 [ 321.096973][ T8982] generic_file_write_iter+0x3f3/0x630 [ 321.102459][ T8982] ? __generic_file_write_iter+0x610/0x610 [ 321.108344][ T8982] ? mark_held_locks+0xe0/0xe0 [ 321.113199][ T8982] new_sync_write+0x4a2/0x700 [ 321.117998][ T8982] ? new_sync_read+0x7a0/0x7a0 [ 321.122877][ T8982] ? rcu_read_lock_any_held+0xcd/0xf0 [ 321.128411][ T8982] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 321.133722][ T8982] __vfs_write+0xc9/0x100 [ 321.138183][ T8982] vfs_write+0x268/0x5d0 [ 321.142456][ T8982] ksys_write+0x12d/0x250 [ 321.146930][ T8982] ? __ia32_sys_read+0xb0/0xb0 [ 321.151800][ T8982] ? __ia32_sys_clock_settime+0x260/0x260 [ 321.157913][ T8982] ? trace_hardirqs_off_caller+0x55/0x230 [ 321.163733][ T8982] do_syscall_64+0xf6/0x7d0 [ 321.168727][ T8982] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 321.174732][ T8982] RIP: 0033:0x45ca29 [ 321.178832][ T8982] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.198942][ T8982] RSP: 002b:00007f1aaf193c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.209162][ T8982] RAX: ffffffffffffffda RBX: 000000000050b900 RCX: 000000000045ca29 [ 321.217416][ T8982] RDX: 000000000001033b RSI: 0000000020000280 RDI: 0000000000000005 [ 321.225513][ T8982] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.233917][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 321.242080][ T8982] R13: 0000000000000cab R14: 00000000004ceff2 R15: 00007f1aaf1946d4 [ 321.250491][ T8982] ================================================================== [ 321.258979][ T8982] Disabling lock debugging due to kernel taint [ 321.277458][ T8987] attempt to access beyond end of device [ 321.283087][ T8982] Kernel panic - not syncing: panic_on_warn set ... [ 321.290015][ T8982] CPU: 1 PID: 8982 Comm: syz-executor.3 Tainted: G B 5.7.0-rc6-syzkaller #0 [ 321.300181][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.304377][ T8987] loop3: rw=2049, want=6434, limit=52 [ 321.310244][ T8982] Call Trace: [ 321.310267][ T8982] dump_stack+0x188/0x20d [ 321.310349][ T8982] panic+0x2e3/0x75c [ 321.310363][ T8982] ? add_taint.cold+0x16/0x16 [ 321.310378][ T8982] ? preempt_schedule_common+0x5e/0xc0 [ 321.310390][ T8982] ? get_block+0x657/0x1380 [ 321.310406][ T8982] ? preempt_schedule_thunk+0x16/0x18 [ 321.310419][ T8982] ? trace_hardirqs_on+0x55/0x220 [ 321.310432][ T8982] ? get_block+0x657/0x1380 [ 321.310444][ T8982] end_report+0x4d/0x53 [ 321.310455][ T8982] __kasan_report.cold+0xd/0x38 [ 321.310474][ T8982] ? get_block+0x657/0x1380 [ 321.330223][ T8987] Buffer I/O error on dev loop3, logical block 3216, lost async page write [ 321.332220][ T8982] ? get_block+0x657/0x1380 [ 321.332245][ T8982] kasan_report+0x33/0x50 [ 321.358700][ T8987] attempt to access beyond end of device [ 321.362153][ T8982] check_memory_region+0x141/0x190 [ 321.362168][ T8982] get_block+0x657/0x1380 [ 321.362185][ T8982] ? block_to_path.isra.0+0x300/0x300 [ 321.362198][ T8982] ? mark_buffer_write_io_error+0x180/0x180 [ 321.362214][ T8982] ? create_empty_buffers+0x590/0x8c0 [ 321.362228][ T8982] ? __alloc_pages_nodemask+0x5f4/0x810 [ 321.362239][ T8982] ? do_raw_spin_unlock+0x171/0x260 [ 321.362256][ T8982] minix_get_block+0xe5/0x110 [ 321.393209][ T8987] loop3: rw=2049, want=6436, limit=52 [ 321.395387][ T8982] __block_write_begin_int+0x490/0x1b00 [ 321.395407][ T8982] ? minix_rename+0x8c0/0x8c0 [ 321.414803][ T8987] Buffer I/O error on dev loop3, logical block 3217, lost async page write [ 321.417212][ T8982] ? remove_inode_buffers+0x1c0/0x1c0 [ 321.417231][ T8982] ? pagecache_get_page+0x204/0xa10 [ 321.425134][ T8987] attempt to access beyond end of device [ 321.428335][ T8982] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 321.428352][ T8982] ? wait_for_stable_page+0x11c/0x1e0 [ 321.435361][ T8987] loop3: rw=2049, want=6438, limit=52 [ 321.438371][ T8982] ? minix_rename+0x8c0/0x8c0 [ 321.438390][ T8982] block_write_begin+0x58/0x2e0 [ 321.447685][ T8987] Buffer I/O error on dev loop3, logical block 3218, lost async page write [ 321.450938][ T8982] minix_write_begin+0x35/0xe0 [ 321.450954][ T8982] generic_perform_write+0x20a/0x4e0 [ 321.450973][ T8982] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 321.450984][ T8982] ? update_time+0xc0/0xc0 [ 321.451002][ T8982] ? down_write+0xdb/0x150 [ 321.458461][ T8987] attempt to access beyond end of device [ 321.464574][ T8982] __generic_file_write_iter+0x24c/0x610 [ 321.464590][ T8982] generic_file_write_iter+0x3f3/0x630 [ 321.464605][ T8982] ? __generic_file_write_iter+0x610/0x610 [ 321.464618][ T8982] ? mark_held_locks+0xe0/0xe0 [ 321.464635][ T8982] new_sync_write+0x4a2/0x700 [ 321.464647][ T8982] ? new_sync_read+0x7a0/0x7a0 [ 321.464667][ T8982] ? rcu_read_lock_any_held+0xcd/0xf0 [ 321.475270][ T8987] loop3: rw=2049, want=6440, limit=52 [ 321.475488][ T8982] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 321.481987][ T8987] Buffer I/O error on dev loop3, logical block 3219, lost async page write [ 321.487511][ T8982] __vfs_write+0xc9/0x100 [ 321.487524][ T8982] vfs_write+0x268/0x5d0 [ 321.487540][ T8982] ksys_write+0x12d/0x250 [ 321.618931][ T8982] ? __ia32_sys_read+0xb0/0xb0 [ 321.623916][ T8982] ? __ia32_sys_clock_settime+0x260/0x260 [ 321.629753][ T8982] ? trace_hardirqs_off_caller+0x55/0x230 [ 321.635770][ T8982] do_syscall_64+0xf6/0x7d0 [ 321.640622][ T8982] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 321.646735][ T8982] RIP: 0033:0x45ca29 [ 321.650626][ T8982] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.670500][ T8982] RSP: 002b:00007f1aaf193c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.679082][ T8982] RAX: ffffffffffffffda RBX: 000000000050b900 RCX: 000000000045ca29 [ 321.687221][ T8982] RDX: 000000000001033b RSI: 0000000020000280 RDI: 0000000000000005 [ 321.695287][ T8982] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.703335][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 321.711297][ T8982] R13: 0000000000000cab R14: 00000000004ceff2 R15: 00007f1aaf1946d4 [ 321.720885][ T8982] Kernel Offset: disabled [ 321.725568][ T8982] Rebooting in 86400 seconds..