[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. 2020/05/23 18:31:29 fuzzer started 2020/05/23 18:31:29 dialing manager at 10.128.0.26:38661 2020/05/23 18:31:29 syscalls: 3055 2020/05/23 18:31:29 code coverage: enabled 2020/05/23 18:31:29 comparison tracing: enabled 2020/05/23 18:31:29 extra coverage: enabled 2020/05/23 18:31:29 setuid sandbox: enabled 2020/05/23 18:31:29 namespace sandbox: enabled 2020/05/23 18:31:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 18:31:29 fault injection: enabled 2020/05/23 18:31:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 18:31:29 net packet injection: enabled 2020/05/23 18:31:29 net device setup: enabled 2020/05/23 18:31:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 18:31:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 18:31:29 USB emulation: enabled 18:34:24 executing program 0: syzkaller login: [ 233.544597][ T6830] IPVS: ftp: loaded support on port[0] = 21 18:34:25 executing program 1: [ 233.689537][ T6830] chnl_net:caif_netlink_parms(): no params data found [ 233.805734][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.821634][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.841580][ T6830] device bridge_slave_0 entered promiscuous mode [ 233.864069][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.871193][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.892214][ T6830] device bridge_slave_1 entered promiscuous mode [ 233.931912][ T6830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.937344][ T6960] IPVS: ftp: loaded support on port[0] = 21 [ 233.953910][ T6830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.013633][ T6830] team0: Port device team_slave_0 added [ 234.041994][ T6830] team0: Port device team_slave_1 added 18:34:25 executing program 2: [ 234.087822][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.096068][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.125861][ T6830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.153704][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.160667][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.190987][ T6830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.305802][ T6830] device hsr_slave_0 entered promiscuous mode 18:34:25 executing program 3: [ 234.372529][ T6830] device hsr_slave_1 entered promiscuous mode [ 234.501012][ T7055] IPVS: ftp: loaded support on port[0] = 21 [ 234.511153][ T6960] chnl_net:caif_netlink_parms(): no params data found 18:34:26 executing program 4: [ 234.834542][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.844875][ T7151] IPVS: ftp: loaded support on port[0] = 21 [ 234.855405][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.891611][ T6960] device bridge_slave_0 entered promiscuous mode [ 234.921408][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.928579][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.938602][ T6960] device bridge_slave_1 entered promiscuous mode [ 235.029485][ T7184] IPVS: ftp: loaded support on port[0] = 21 [ 235.135002][ T6960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.154540][ T7055] chnl_net:caif_netlink_parms(): no params data found 18:34:26 executing program 5: [ 235.192367][ T6960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.275133][ T6830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.361605][ T6830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.398085][ T6960] team0: Port device team_slave_0 added [ 235.407679][ T6960] team0: Port device team_slave_1 added [ 235.425624][ T6830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.434594][ T7326] IPVS: ftp: loaded support on port[0] = 21 [ 235.496088][ T6830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.583838][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.591083][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.621787][ T6960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.639380][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.648668][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.679957][ T6960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.760583][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.768180][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.777716][ T7055] device bridge_slave_0 entered promiscuous mode [ 235.811419][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.818757][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.827589][ T7055] device bridge_slave_1 entered promiscuous mode [ 235.865356][ T7151] chnl_net:caif_netlink_parms(): no params data found [ 235.887640][ T7055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.954649][ T6960] device hsr_slave_0 entered promiscuous mode [ 236.001717][ T6960] device hsr_slave_1 entered promiscuous mode [ 236.061825][ T6960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.061998][ T6960] Cannot create hsr debugfs directory [ 236.108293][ T7055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.195255][ T7055] team0: Port device team_slave_0 added [ 236.235737][ T7055] team0: Port device team_slave_1 added [ 236.250424][ T7184] chnl_net:caif_netlink_parms(): no params data found [ 236.289627][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.297236][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.324114][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.379792][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.386887][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.412880][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.493505][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.500576][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.510109][ T7151] device bridge_slave_0 entered promiscuous mode [ 236.559007][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.567582][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.576618][ T7151] device bridge_slave_1 entered promiscuous mode [ 236.634881][ T7055] device hsr_slave_0 entered promiscuous mode [ 236.702115][ T7055] device hsr_slave_1 entered promiscuous mode [ 236.741237][ T7055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.748979][ T7055] Cannot create hsr debugfs directory [ 236.755516][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 236.855402][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.862916][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.873378][ T7184] device bridge_slave_0 entered promiscuous mode [ 236.883106][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.890159][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.899146][ T7184] device bridge_slave_1 entered promiscuous mode [ 236.922033][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.966861][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.996984][ T7184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.027585][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.035261][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.043896][ T7326] device bridge_slave_0 entered promiscuous mode [ 237.065185][ T7151] team0: Port device team_slave_0 added [ 237.074752][ T7184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.085582][ T7151] team0: Port device team_slave_1 added [ 237.114147][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.127804][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.136353][ T7326] device bridge_slave_1 entered promiscuous mode [ 237.155577][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.167715][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.198345][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.218365][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.225430][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.252614][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.345728][ T7151] device hsr_slave_0 entered promiscuous mode [ 237.391480][ T7151] device hsr_slave_1 entered promiscuous mode [ 237.444664][ T7151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.452282][ T7151] Cannot create hsr debugfs directory [ 237.467277][ T7184] team0: Port device team_slave_0 added [ 237.478786][ T7184] team0: Port device team_slave_1 added [ 237.488928][ T6960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.548527][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.584387][ T6960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.635213][ T6830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.647618][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.673368][ T6960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.729744][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.736827][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.763734][ T7184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.789563][ T6960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.848771][ T7326] team0: Port device team_slave_0 added [ 237.855448][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.862986][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.889032][ T7184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.931870][ T7326] team0: Port device team_slave_1 added [ 237.959807][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.967051][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.994044][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.011186][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.019332][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.053854][ T6830] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.061288][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.068232][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.095291][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.195939][ T7184] device hsr_slave_0 entered promiscuous mode [ 238.241990][ T7184] device hsr_slave_1 entered promiscuous mode [ 238.281022][ T7184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.288598][ T7184] Cannot create hsr debugfs directory [ 238.294939][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.304303][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.313944][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.321286][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.329153][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.338574][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.347184][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.354301][ T2541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.374220][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.382758][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.417167][ T7055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.505144][ T7326] device hsr_slave_0 entered promiscuous mode [ 238.561486][ T7326] device hsr_slave_1 entered promiscuous mode [ 238.620943][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.628518][ T7326] Cannot create hsr debugfs directory [ 238.645721][ T7055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.716124][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.746843][ T7055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.829156][ T7055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.883296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.892545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.945870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.957930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.969452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.037705][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.046735][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.058857][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.067862][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.140535][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.198486][ T7151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.234456][ T7151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.285280][ T7151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.343039][ T7151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.388113][ T6960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.421735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.429176][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.479235][ T7326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.561785][ T7326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.625623][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.633055][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.641791][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.660880][ T7184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.725658][ T7184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.794840][ T7184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.845901][ T7326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.905662][ T6830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.929451][ T7184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.983874][ T7326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.087438][ T7055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.098755][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.108100][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.117136][ T2498] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.124244][ T2498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.133236][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.142313][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.150845][ T2498] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.157941][ T2498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.202122][ T7055] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.214595][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.223149][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.232271][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.241282][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.248920][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.280733][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.289379][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.303734][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.314176][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.325239][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.334993][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.347613][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.379283][ T6830] device veth0_vlan entered promiscuous mode [ 240.394534][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.407076][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.419009][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.426137][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.436696][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.445430][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.454131][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.463948][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.481485][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.489373][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.498169][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.535189][ T6960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.548497][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.556851][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.567191][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.576045][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.585546][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.594307][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.601430][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.608970][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.617849][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.632727][ T6830] device veth1_vlan entered promiscuous mode [ 240.665171][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.676309][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.685582][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.695312][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.704425][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.726814][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.744987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.753671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.762153][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.771413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.802987][ T7055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.815667][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.827078][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.837488][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.859971][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.882279][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.889995][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.901091][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.909630][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.918932][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.926026][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.934129][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.941724][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.962517][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.971462][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.979926][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.012947][ T6960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.030983][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.039520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.049572][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.056975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.066822][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.081393][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.094855][ T6830] device veth0_macvtap entered promiscuous mode [ 241.106733][ T6830] device veth1_macvtap entered promiscuous mode [ 241.145429][ T7151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.156122][ T7151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.176387][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.184831][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.193958][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.203567][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.213580][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.223422][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.233344][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.242537][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.251043][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.259531][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.268571][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.308890][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.317563][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.326563][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.334373][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.342749][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.350140][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.358274][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.369649][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.381974][ T7055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.408129][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.415602][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.425961][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.435146][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.444283][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.464501][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.491802][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.501884][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.512715][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.522367][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.531233][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.538298][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.546302][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.555782][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.564474][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.571607][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.579515][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.587790][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.632202][ T7184] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.646215][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.656715][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.666454][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.674884][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.740916][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.749673][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.761974][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.840331][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.849323][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.860709][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.869471][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.876588][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.885012][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.894129][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.902964][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.910960][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.920685][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.932021][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.946807][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.042313][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.050219][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 18:34:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="f6434f966b7a9c0a40f4ab5fb1", 0xd}, {&(0x7f00000001c0)="9c83bd01463aa1c308507acce09651cf6a6fe299e66640342e27a782be9290a7e233081bf1b815d9301ac521a3820fc5da76ae5ede41e931cfcc55041053be1906547bb8cec9e121d8c2ae3a13777333df7dd9c347517184c75e9c5cc00bc933f622e7621a62c09e5f46594fb330e89ae58845cb04b14791e64f734fe057a5f6cc16f25a4db35585d28dfff3becc2b5ea11622e536e3a93b4febba62dcb635ead3d922", 0xa3}], 0x2, &(0x7f0000001c00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read$alg(r1, &(0x7f00000002c0)=""/4072, 0x1032) [ 242.088950][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.113663][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.127953][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.139457][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.157641][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.167665][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.201405][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.219940][ T6960] device veth0_vlan entered promiscuous mode 18:34:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x15, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {'\a'}}}}}}}, 0x0) [ 242.251511][ T7055] device veth0_vlan entered promiscuous mode [ 242.281893][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.289757][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.311560][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.323973][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.333638][ T8095] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.346613][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 18:34:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0xe0, 0x4) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) recvmmsg(r0, &(0x7f0000000140), 0x3db, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x4}, 0xb) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x9c) [ 242.371211][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.380034][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.392426][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.422960][ T6960] device veth1_vlan entered promiscuous mode [ 242.450599][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.459811][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.476835][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.493319][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.502699][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.512445][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.521871][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.531519][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.542353][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.554576][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.562839][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.593307][ T7055] device veth1_vlan entered promiscuous mode [ 242.607929][ T7151] device veth0_vlan entered promiscuous mode [ 242.622539][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.633069][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.644974][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.655046][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.664089][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.676363][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.725759][ T7151] device veth1_vlan entered promiscuous mode [ 242.773791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.783767][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.793460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.805401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.814466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.826982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.836539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.848853][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.869865][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.881376][ T7055] device veth0_macvtap entered promiscuous mode [ 242.905535][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.924776][ T6960] device veth0_macvtap entered promiscuous mode [ 242.935483][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.947998][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.959106][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.968987][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.977392][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.986413][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.998772][ T7055] device veth1_macvtap entered promiscuous mode [ 243.015746][ T6960] device veth1_macvtap entered promiscuous mode [ 243.026006][ T7151] device veth0_macvtap entered promiscuous mode [ 243.101955][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.125255][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.139614][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.157946][ T7151] device veth1_macvtap entered promiscuous mode [ 243.168285][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.186498][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.197084][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.213049][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.225536][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.235455][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.244164][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.252433][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 18:34:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) [ 243.260794][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.268734][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.277774][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.287288][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.304795][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.326413][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.355288][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.374663][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.412102][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.429743][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.444640][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.465734][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.479462][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.492739][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.505194][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.513526][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.527220][ T8118] device vcan0 entered promiscuous mode [ 243.534462][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.568335][ T8121] device bridge_slave_0 left promiscuous mode [ 243.575802][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.673438][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.682475][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.693167][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.702592][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.711702][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.721144][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.729911][ T8122] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 243.751573][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.795499][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.804499][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.813856][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.822989][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.835549][ T7326] device veth0_vlan entered promiscuous mode [ 243.852958][ T0] NOHZ: local_softirq_pending 08 18:34:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@eol, @generic={0x0, 0xe, "2e3b8a0408e5b88447b36fa4"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) [ 243.907611][ T7184] device veth0_vlan entered promiscuous mode [ 243.916122][ T8121] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 243.924627][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.946635][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:34:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@eol, @generic={0x0, 0xe, "2e3b8a0408e5b88447b36fa4"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) [ 243.971104][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.979038][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:34:35 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@eol, @generic={0x0, 0xe, "2e3b8a0408e5b88447b36fa4"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) [ 244.072538][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.109966][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.127050][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.150135][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.160046][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.190125][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.227791][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.247293][ T7184] device veth1_vlan entered promiscuous mode [ 244.297840][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.314468][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.325025][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.337436][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.349619][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.360500][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.371043][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.381168][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.391655][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.403529][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.421959][ T7326] device veth1_vlan entered promiscuous mode [ 244.520352][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.532827][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.568479][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.578476][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:34:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="e16d2ec3caddaad4e6658bd4ab7f6c86e4abbf8a44a0a57006bbe73e99b74783c9bdf2e51ade2542e26dc585c70726853a955fe259cb291fd8c2e9ccd55f1d5816f6fe7acb3614fdb73a6e4447853b7f5b7f4ce0e1b970d350e65d46f62d6ba2ae4b6740046dba52b4e892b1c4bf824ebd189cc5ff18c74c55475900dfa5cc5b6f03912eaf8d38056d", 0x89) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000)="14885eed546ff69928d88019da678265cb928c68bd832286b357666a2952d944db180c081c894742f06f015d761e417a3fe9e66a1d", 0xfffffffffffffd82, 0x8a0, 0x0, 0xffffffffffffffbf) 18:34:36 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@eol, @generic={0x0, 0xe, "2e3b8a0408e5b88447b36fa4"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) [ 244.672161][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.687734][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.739432][ T7184] device veth0_macvtap entered promiscuous mode [ 244.815712][ T7184] device veth1_macvtap entered promiscuous mode [ 244.955481][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.020220][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:34:36 executing program 3: syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x54, 0x6, 0x0, @remote, @local, {[@dstopts={0x0, 0x6, [], [@generic={0x0, 0x2f, "d1637b93f0fd9839101c17c49b9147b123546c8b448adfeadba6d308df728190b4aa3fc0396b9fdb774fb3516fc207"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 245.068351][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.089071][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.099917][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.118660][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.131079][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.149983][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.171901][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.179726][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.198705][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.241358][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.259734][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.280919][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.289833][ T2541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.307281][ T7326] device veth0_macvtap entered promiscuous mode [ 245.343681][ T7326] device veth1_macvtap entered promiscuous mode [ 245.357419][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.372461][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.383520][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.394199][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.405668][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.416213][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.427623][ T7184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.440501][ T7184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.454428][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.477813][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.478503][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.494899][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.504806][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.519764][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.535377][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.545901][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.556797][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.567141][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.577660][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.587902][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.598665][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.608592][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.619450][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.632536][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.648176][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.658986][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.669665][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.681794][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.693250][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.704862][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.715388][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.727302][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.737896][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.749685][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.762580][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.774927][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.787924][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.803785][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.814507][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:34:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 18:34:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000002c00270d000000000003000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002400020020000b80080001000600000014000280100001"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:34:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) mmap$xdp(&(0x7f000038d000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@nl=@unspec, &(0x7f0000000080)=0x80, 0x80000) ioctl$int_out(r3, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 18:34:37 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 18:34:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) 18:34:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="0800000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r6, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 18:34:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a009659bcecc7a97c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 246.302194][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:34:37 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 18:34:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x2343a726) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) 18:34:37 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 18:34:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000400000008000a00"], 0x28}}, 0x0) 18:34:38 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x24, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@eol, @generic={0x0, 0xe, "2e3b8a0408e5b88447b36fa4"}]}}}}}}}}, 0x0) [ 246.868994][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 246.899057][ T8173] device bridge_slave_0 left promiscuous mode 18:34:38 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x18, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) [ 246.931351][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.076082][ T8179] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 247.097758][ T8191] device bridge_slave_0 left promiscuous mode [ 247.122154][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.514049][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.546239][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:34:39 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000024000b0f00"/18, @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000090002000000c8"], 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000024000b6c0f00000000a8d609001f71af", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100706c7567000000000c0002"], 0x3c}}, 0x0) 18:34:39 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:34:39 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)="14885eed546ff69928d88019da678265cb928c68bd832286b357666a2952d944db180c081c894742f06f015d761e417a3fe9e66a1d", 0xfffffffffffffd82, 0x8a0, 0x0, 0xffffffffffffffbf) 18:34:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000190404000000000000000000ea8f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000520007031dfffd946f610500070000040000000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x88, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x8a9}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x40}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x30}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c845}, 0x400) 18:34:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="f6434f966b7a9c0a40f4ab5fb105bafcc6c75c22af224eb36bc1ef04037a66b8d9c748a50321b00948d364012d987312c0f6a1be006d396f0e8b19059552fa06", 0x40}], 0x1, &(0x7f0000001c00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read$alg(r1, &(0x7f00000002c0)=""/4072, 0x1032) 18:34:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3ff, 0x0, 0xd0}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x6788, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='x', 0x4f90}], 0x1) 18:34:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000100000000000000000000500010006"], 0x1c}}, 0x0) 18:34:39 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x9) 18:34:39 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5b, 0x50, 0x7a, 0x40, 0x813, 0x1, 0xabf5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x17, 0xd4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x2, "018c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:34:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="d00800002400ffffff7f12000410ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 18:34:39 executing program 1: syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x24, 0x6, 0x0, @remote, @local, {[@dstopts={0x0, 0x0, [], [@generic={0x0, 0x3, "d1637b"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:34:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x20000000200000d, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x30314142}) 18:34:39 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x601, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000540)="1c", 0x1}, {&(0x7f0000000080)="d5", 0x1}], 0x2) 18:34:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 248.330638][ T2498] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 248.690054][ T2498] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=ab.f5 [ 248.709780][ T2498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.735428][ T2498] usb 5-1: config 0 descriptor?? 18:34:40 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}]}}) 18:34:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}}, 0x0) 18:34:40 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="f6434f966b7a9c0a40f4ab5fb105bafcc6c75c22af224eb36bc1ef04037a66b8", 0x20}], 0x1, &(0x7f0000001c00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read$alg(r1, &(0x7f00000002c0)=""/4072, 0x1032) 18:34:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.events\x00', 0x275a, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000)="14885eed546ff69928d88019da678265cb928c68bd832286b357666a2952d944db180c081c894742f06f015d761e417a3fe9e66a1d", 0xfffffffffffffd82, 0x8a0, 0x0, 0xffffffffffffffbf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:34:40 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) r2 = dup(r0) getrandom(&(0x7f0000001980)=""/4106, 0x100a, 0x1) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) 18:34:42 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)}]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 18:34:42 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000200054f61, 0x80000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeda) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 18:34:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39e00108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) sendmsg$nl_route_sched(r1, 0x0, 0x11) 18:34:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x20, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040), &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0xe6, &(0x7f0000e0b000)) r2 = mq_open(&(0x7f0000000280)='eth0\x00', 0x0, 0x20, 0x0) mq_notify(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed"}}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r2, 0x9, 0x6, 0x3, 0x1ff}) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000200)={0x0, 0xffffffff, 0xfffd, 0x7fffffff}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) mq_timedsend(r3, &(0x7f00000e6000), 0x0, 0x5, &(0x7f0000e0b000)={0x0, 0x1c9c380}) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 18:34:42 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "4f64f266"}, &(0x7f0000000140)=0x28) [ 251.007543][ T7447] usb 5-1: USB disconnect, device number 2 [ 251.091566][ T8313] NFS: Device name not specified 18:34:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 251.123682][ C1] hrtimer: interrupt took 29365 ns 18:34:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:34:42 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1}, 0x10}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000000), 0xc, &(0x7f0000003e80)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000003f40)=[@rights={{0x10}}], 0x10, 0x24080000}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, 0x0) 18:34:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) [ 251.336733][ T29] audit: type=1804 audit(1590258882.688:2): pid=8324 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir458171093/syzkaller.NdFWWl/5/cgroup.controllers" dev="sda1" ino=15804 res=1 [ 251.370453][ T8324] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 18:34:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39e00108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) sendmsg$nl_route_sched(r1, 0x0, 0x11) [ 251.438456][ T8328] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.440431][ T29] audit: type=1804 audit(1590258882.788:3): pid=8328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/19/cgroup.controllers" dev="sda1" ino=15770 res=1 [ 251.524511][ T8334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 251.555707][ T8332] IPVS: ftp: loaded support on port[0] = 21 18:34:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045009, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 18:34:43 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2f0000001c000367ffffff000d00000002000004010000003f0006c913000100230000000000000058b0e61c33050b", 0x2f}], 0x1}, 0x0) 18:34:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 251.965319][ T8332] IPVS: ftp: loaded support on port[0] = 21 18:34:43 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045009, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 18:34:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045009, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 18:34:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:43 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1}, 0x10}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000000), 0xc, &(0x7f0000003e80)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000003f40)=[@rights={{0x10}}], 0x10, 0x24080000}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, 0x0) [ 252.284785][ T29] audit: type=1804 audit(1590258883.638:4): pid=8383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/20/cgroup.controllers" dev="sda1" ino=15808 res=1 [ 252.316542][ T8383] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.340701][ T21] tipc: TX() has been purged, node left! [ 252.393802][ T8414] IPVS: ftp: loaded support on port[0] = 21 18:34:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045009, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 18:34:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) 18:34:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) 18:34:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) 18:34:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 253.170373][ T29] audit: type=1804 audit(1590258884.528:5): pid=8455 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/21/cgroup.controllers" dev="sda1" ino=15797 res=1 [ 253.204723][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 18:34:44 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 18:34:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 18:34:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 18:34:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 18:34:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 18:34:45 executing program 1: setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 254.321603][ T29] audit: type=1804 audit(1590258885.678:6): pid=8490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/22/cgroup.controllers" dev="sda1" ino=15797 res=1 [ 254.352429][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 18:34:45 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 18:34:45 executing program 1: setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:46 executing program 1: setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 18:34:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 18:34:46 executing program 1: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 18:34:46 executing program 1: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) [ 255.170107][ T29] audit: type=1804 audit(1590258886.528:7): pid=8517 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/23/cgroup.controllers" dev="sda1" ino=15807 res=1 [ 255.204864][ T8517] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 18:34:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 18:34:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:47 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:47 executing program 1: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 18:34:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 18:34:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 255.951958][ T29] audit: type=1804 audit(1590258887.308:8): pid=8549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/24/cgroup.controllers" dev="sda1" ino=15816 res=1 18:34:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) [ 256.250579][ T29] audit: type=1804 audit(1590258887.608:9): pid=8559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/25/cgroup.controllers" dev="sda1" ino=15820 res=1 [ 256.281736][ T8559] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 18:34:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:48 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) flock(r0, 0x3) fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x100000000}) close(r0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) flock(r1, 0x3) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x100000000}) close(r1) execve(0x0, 0x0, 0x0) 18:34:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) 18:34:48 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) 18:34:48 executing program 1: socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:34:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) [ 257.388150][ T29] audit: type=1804 audit(1590258888.739:10): pid=8595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/26/cgroup.controllers" dev="sda1" ino=15816 res=1 18:34:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) 18:34:48 executing program 1: socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:34:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) 18:34:49 executing program 1: socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 18:34:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x0, &(0x7f0000000000)=0x3f000000, 0x4) [ 257.792376][ T29] audit: type=1804 audit(1590258889.149:11): pid=8607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/27/cgroup.controllers" dev="sda1" ino=15823 res=1 [ 257.830375][ T8607] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 18:34:49 executing program 5: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:34:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000404c05d50340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 18:34:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x0, &(0x7f0000000000)=0x3f000000, 0x4) 18:34:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) socket(0x200000000000011, 0x3, 0x0) 18:34:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:34:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x17b) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) 18:34:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x0, &(0x7f0000000000)=0x3f000000, 0x4) [ 258.589683][ T29] audit: type=1804 audit(1590258889.949:12): pid=8631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/28/cgroup.controllers" dev="sda1" ino=15827 res=1 [ 258.622530][ T8631] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 18:34:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, 0x0, 0x0) [ 258.748947][ T2512] usb 5-1: new high-speed USB device number 3 using dummy_hcd 18:34:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, 0x0, 0x0) 18:34:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000030003dfb0000000000000000000000003c000100380001000f00010074756e6e656c5f6b6579"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:34:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, 0x0, 0x0) [ 259.129089][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.168471][ T2512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:34:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc004500a, &(0x7f0000000040)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}) [ 259.220337][ T2512] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.40 [ 259.252047][ T2512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.274134][ T29] audit: type=1804 audit(1590258890.629:13): pid=8648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir657779527/syzkaller.m6Da4H/29/cgroup.controllers" dev="sda1" ino=15808 res=1 [ 259.301662][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.331921][ T2512] usb 5-1: config 0 descriptor?? 18:34:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d1, &(0x7f0000000000), 0x4) [ 259.861261][ T2512] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0001/input/input5 [ 259.887038][ T2512] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 260.052678][ T2512] usb 5-1: USB disconnect, device number 3 [ 260.075624][ T2512] ================================================================== [ 260.084097][ T2512] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 260.091571][ T2512] Read of size 8 at addr ffff8880587f4150 by task kworker/1:6/2512 [ 260.099454][ T2512] [ 260.101795][ T2512] CPU: 1 PID: 2512 Comm: kworker/1:6 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 260.111326][ T2512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.121488][ T2512] Workqueue: usb_hub_wq hub_event [ 260.126597][ T2512] Call Trace: [ 260.130308][ T2512] dump_stack+0x18f/0x20d [ 260.136523][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 260.141442][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 260.146354][ T2512] print_address_description.constprop.0.cold+0xd3/0x413 [ 260.153439][ T2512] ? joydev_disconnect+0x3d/0xb0 [ 260.159200][ T2512] ? __input_unregister_device+0x1b0/0x430 [ 260.165186][ T2512] ? input_unregister_device+0xb4/0xf0 [ 260.170885][ T2512] ? hidinput_disconnect+0x15e/0x3d0 [ 260.176346][ T2512] ? hid_disconnect+0x13f/0x1a0 [ 260.181300][ T2512] ? vprintk_func+0x97/0x1a6 [ 260.185885][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 260.190725][ T2512] kasan_report.cold+0x1f/0x37 [ 260.195490][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 260.200345][ T2512] __mutex_lock+0x1033/0x13c0 [ 260.205032][ T2512] ? print_usage_bug+0x240/0x240 [ 260.210323][ T2512] ? joydev_cleanup+0x21/0x190 [ 260.215090][ T2512] ? trace_hardirqs_off+0x50/0x220 [ 260.220187][ T2512] ? mutex_trylock+0x2c0/0x2c0 [ 260.224936][ T2512] ? mark_held_locks+0x9f/0xe0 [ 260.229685][ T2512] ? kfree+0x1eb/0x2b0 [ 260.233744][ T2512] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 260.239790][ T2512] ? kfree_const+0x51/0x60 [ 260.252743][ T2512] ? dev_attr_show+0x90/0x90 [ 260.257343][ T2512] ? joydev_cleanup+0x21/0x190 [ 260.262191][ T2512] joydev_cleanup+0x21/0x190 [ 260.266802][ T2512] joydev_disconnect+0x45/0xb0 [ 260.271555][ T2512] __input_unregister_device+0x1b0/0x430 [ 260.277187][ T2512] input_unregister_device+0xb4/0xf0 [ 260.282560][ T2512] hidinput_disconnect+0x15e/0x3d0 [ 260.287756][ T2512] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 260.294082][ T2512] hid_disconnect+0x13f/0x1a0 [ 260.298926][ T2512] hid_hw_stop+0x12/0x70 [ 260.303251][ T2512] hid_device_remove+0xed/0x240 [ 260.309588][ T2512] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 260.316250][ T2512] ? hid_compare_device_paths+0xc0/0xc0 [ 260.321995][ T2512] device_release_driver_internal+0x231/0x500 [ 260.328048][ T2512] bus_remove_device+0x2dc/0x4a0 [ 260.332974][ T2512] device_del+0x481/0xd30 [ 260.337299][ T2512] ? device_link_add_missing_supplier_links+0x370/0x370 [ 260.344233][ T2512] ? mark_held_locks+0x9f/0xe0 [ 260.348982][ T2512] ? _raw_spin_unlock_irq+0x1f/0x80 [ 260.354167][ T2512] hid_destroy_device+0xe1/0x150 [ 260.359137][ T2512] usbhid_disconnect+0x9f/0xe0 [ 260.363948][ T2512] usb_unbind_interface+0x1bd/0x8a0 [ 260.369174][ T2512] ? __pm_runtime_idle+0xd1/0x320 [ 260.374183][ T2512] ? usb_autoresume_device+0x60/0x60 [ 260.379452][ T2512] device_release_driver_internal+0x432/0x500 [ 260.385708][ T2512] bus_remove_device+0x2dc/0x4a0 [ 260.390632][ T2512] device_del+0x481/0xd30 [ 260.395150][ T2512] ? device_link_add_missing_supplier_links+0x370/0x370 [ 260.402279][ T2512] ? usb_remove_ep_devs+0x3e/0x80 [ 260.407824][ T2512] ? remove_intf_ep_devs+0x13f/0x1d0 [ 260.413704][ T2512] usb_disable_device+0x211/0x690 [ 260.420309][ T2512] usb_disconnect+0x284/0x8d0 [ 260.425148][ T2512] hub_event+0x17ca/0x38f0 [ 260.431599][ T2512] ? hub_port_debounce+0x260/0x260 [ 260.437020][ T2512] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 260.443293][ T2512] ? debug_smp_processor_id+0x2f/0x185 [ 260.448771][ T2512] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 260.454403][ T2512] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 260.460461][ T2512] process_one_work+0x965/0x16a0 [ 260.465387][ T2512] ? lock_release+0x800/0x800 [ 260.470047][ T2512] ? pwq_dec_nr_in_flight+0x310/0x310 [ 260.475405][ T2512] ? rwlock_bug.part.0+0x90/0x90 [ 260.480539][ T2512] worker_thread+0x96/0xe20 [ 260.486022][ T2512] ? process_one_work+0x16a0/0x16a0 [ 260.492058][ T2512] kthread+0x3b5/0x4a0 [ 260.496571][ T2512] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 260.502630][ T2512] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 260.510210][ T2512] ret_from_fork+0x24/0x30 [ 260.515952][ T2512] [ 260.518267][ T2512] Allocated by task 2512: [ 260.523107][ T2512] save_stack+0x1b/0x40 [ 260.527244][ T2512] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 260.532875][ T2512] kmem_cache_alloc_trace+0x153/0x7d0 [ 260.538244][ T2512] joydev_connect+0x83/0xd2f [ 260.542815][ T2512] input_attach_handler+0x194/0x200 [ 260.548011][ T2512] input_register_device.cold+0xf5/0x246 [ 260.553712][ T2512] hidinput_connect+0x4f8f/0xdb30 [ 260.558726][ T2512] hid_connect+0x96b/0xbc0 [ 260.563131][ T2512] hid_hw_start+0xa2/0x130 [ 260.567534][ T2512] sony_probe+0x214/0x2d0 [ 260.571851][ T2512] hid_device_probe+0x2be/0x3f0 [ 260.576684][ T2512] really_probe+0x281/0x6d0 [ 260.581167][ T2512] driver_probe_device+0xfe/0x1d0 [ 260.586401][ T2512] __device_attach_driver+0x1c2/0x220 [ 260.591768][ T2512] bus_for_each_drv+0x162/0x1e0 [ 260.596637][ T2512] __device_attach+0x21a/0x360 [ 260.601386][ T2512] bus_probe_device+0x1e4/0x290 [ 260.606235][ T2512] device_add+0xaf1/0x1900 [ 260.610646][ T2512] hid_add_device+0x33c/0x9a0 [ 260.615327][ T2512] usbhid_probe+0xac8/0xff0 [ 260.619821][ T2512] usb_probe_interface+0x305/0x7a0 [ 260.625581][ T2512] really_probe+0x281/0x6d0 [ 260.630263][ T2512] driver_probe_device+0xfe/0x1d0 [ 260.636149][ T2512] __device_attach_driver+0x1c2/0x220 [ 260.641937][ T2512] bus_for_each_drv+0x162/0x1e0 [ 260.647169][ T2512] __device_attach+0x21a/0x360 [ 260.652358][ T2512] bus_probe_device+0x1e4/0x290 [ 260.658057][ T2512] device_add+0xaf1/0x1900 [ 260.662717][ T2512] usb_set_configuration+0xec5/0x1740 [ 260.668072][ T2512] usb_generic_driver_probe+0x9d/0xe0 [ 260.673423][ T2512] usb_probe_device+0xc6/0x1f0 [ 260.678949][ T2512] really_probe+0x281/0x6d0 [ 260.683891][ T2512] driver_probe_device+0xfe/0x1d0 [ 260.689254][ T2512] __device_attach_driver+0x1c2/0x220 [ 260.695409][ T2512] bus_for_each_drv+0x162/0x1e0 [ 260.700349][ T2512] __device_attach+0x21a/0x360 [ 260.705190][ T2512] bus_probe_device+0x1e4/0x290 [ 260.710020][ T2512] device_add+0xaf1/0x1900 [ 260.716514][ T2512] usb_new_device.cold+0x753/0x103d [ 260.721694][ T2512] hub_event+0x1eca/0x38f0 [ 260.726543][ T2512] process_one_work+0x965/0x16a0 [ 260.732528][ T2512] worker_thread+0x96/0xe20 [ 260.737364][ T2512] kthread+0x3b5/0x4a0 [ 260.741458][ T2512] ret_from_fork+0x24/0x30 [ 260.745936][ T2512] [ 260.748331][ T2512] Freed by task 2512: [ 260.753018][ T2512] save_stack+0x1b/0x40 [ 260.757168][ T2512] __kasan_slab_free+0xf7/0x140 [ 260.762097][ T2512] kfree+0x109/0x2b0 [ 260.765985][ T2512] device_release+0x71/0x200 [ 260.770876][ T2512] kobject_put+0x1c8/0x2f0 [ 260.777622][ T2512] cdev_device_del+0x69/0x80 [ 260.782627][ T2512] joydev_disconnect+0x3d/0xb0 [ 260.787383][ T2512] __input_unregister_device+0x1b0/0x430 [ 260.793088][ T2512] input_unregister_device+0xb4/0xf0 [ 260.798558][ T2512] hidinput_disconnect+0x15e/0x3d0 [ 260.803737][ T2512] hid_disconnect+0x13f/0x1a0 [ 260.808888][ T2512] hid_hw_stop+0x12/0x70 [ 260.813486][ T2512] hid_device_remove+0xed/0x240 [ 260.818335][ T2512] device_release_driver_internal+0x231/0x500 [ 260.824608][ T2512] bus_remove_device+0x2dc/0x4a0 [ 260.829556][ T2512] device_del+0x481/0xd30 [ 260.835365][ T2512] hid_destroy_device+0xe1/0x150 [ 260.840299][ T2512] usbhid_disconnect+0x9f/0xe0 [ 260.845045][ T2512] usb_unbind_interface+0x1bd/0x8a0 [ 260.850225][ T2512] device_release_driver_internal+0x432/0x500 [ 260.856294][ T2512] bus_remove_device+0x2dc/0x4a0 [ 260.861246][ T2512] device_del+0x481/0xd30 [ 260.865569][ T2512] usb_disable_device+0x211/0x690 [ 260.870575][ T2512] usb_disconnect+0x284/0x8d0 [ 260.875840][ T2512] hub_event+0x17ca/0x38f0 [ 260.880949][ T2512] process_one_work+0x965/0x16a0 [ 260.886420][ T2512] worker_thread+0x96/0xe20 [ 260.892612][ T2512] kthread+0x3b5/0x4a0 [ 260.897404][ T2512] ret_from_fork+0x24/0x30 [ 260.902489][ T2512] [ 260.904816][ T2512] The buggy address belongs to the object at ffff8880587f4000 [ 260.904816][ T2512] which belongs to the cache kmalloc-8k of size 8192 [ 260.919817][ T2512] The buggy address is located 336 bytes inside of [ 260.919817][ T2512] 8192-byte region [ffff8880587f4000, ffff8880587f6000) [ 260.934641][ T2512] The buggy address belongs to the page: [ 260.940524][ T2512] page:ffffea000161fd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea000161fd00 order:2 compound_mapcount:0 compound_pincount:0 [ 260.955903][ T2512] flags: 0xfffe0000010200(slab|head) [ 260.961259][ T2512] raw: 00fffe0000010200 ffffea0001671508 ffffea0001606a08 ffff8880aa0021c0 [ 260.969999][ T2512] raw: 0000000000000000 ffff8880587f4000 0000000100000001 0000000000000000 [ 260.978557][ T2512] page dumped because: kasan: bad access detected [ 260.985203][ T2512] [ 260.987705][ T2512] Memory state around the buggy address: [ 260.993530][ T2512] ffff8880587f4000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.003362][ T2512] ffff8880587f4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.011601][ T2512] >ffff8880587f4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.020336][ T2512] ^ [ 261.027014][ T2512] ffff8880587f4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.035055][ T2512] ffff8880587f4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.043361][ T2512] ================================================================== [ 261.053725][ T2512] Disabling lock debugging due to kernel taint [ 261.076800][ T2512] Kernel panic - not syncing: panic_on_warn set ... [ 261.083412][ T2512] CPU: 1 PID: 2512 Comm: kworker/1:6 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 261.094506][ T2512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.104564][ T2512] Workqueue: usb_hub_wq hub_event [ 261.109581][ T2512] Call Trace: [ 261.112885][ T2512] dump_stack+0x18f/0x20d [ 261.117211][ T2512] ? __mutex_lock+0xf50/0x13c0 [ 261.122033][ T2512] panic+0x2e3/0x75c [ 261.125926][ T2512] ? __warn_printk+0xf3/0xf3 [ 261.130991][ T2512] ? preempt_schedule_common+0x5e/0xc0 [ 261.136445][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 261.141289][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 261.146156][ T2512] ? preempt_schedule_thunk+0x16/0x18 [ 261.151524][ T2512] ? trace_hardirqs_on+0x55/0x230 [ 261.156546][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 261.161393][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 261.166242][ T2512] end_report+0x4d/0x53 [ 261.170395][ T2512] kasan_report.cold+0xd/0x37 [ 261.175064][ T2512] ? __mutex_lock+0x1033/0x13c0 [ 261.179913][ T2512] __mutex_lock+0x1033/0x13c0 [ 261.184586][ T2512] ? print_usage_bug+0x240/0x240 [ 261.189521][ T2512] ? joydev_cleanup+0x21/0x190 [ 261.194278][ T2512] ? trace_hardirqs_off+0x50/0x220 [ 261.199382][ T2512] ? mutex_trylock+0x2c0/0x2c0 [ 261.204143][ T2512] ? mark_held_locks+0x9f/0xe0 [ 261.208903][ T2512] ? kfree+0x1eb/0x2b0 [ 261.212967][ T2512] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 261.218945][ T2512] ? kfree_const+0x51/0x60 [ 261.223356][ T2512] ? dev_attr_show+0x90/0x90 [ 261.227945][ T2512] ? joydev_cleanup+0x21/0x190 [ 261.232702][ T2512] joydev_cleanup+0x21/0x190 [ 261.237289][ T2512] joydev_disconnect+0x45/0xb0 [ 261.242050][ T2512] __input_unregister_device+0x1b0/0x430 [ 261.247679][ T2512] input_unregister_device+0xb4/0xf0 [ 261.252959][ T2512] hidinput_disconnect+0x15e/0x3d0 [ 261.258152][ T2512] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 261.263693][ T2512] hid_disconnect+0x13f/0x1a0 [ 261.268363][ T2512] hid_hw_stop+0x12/0x70 [ 261.272602][ T2512] hid_device_remove+0xed/0x240 [ 261.277447][ T2512] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 261.284030][ T2512] ? hid_compare_device_paths+0xc0/0xc0 [ 261.289569][ T2512] device_release_driver_internal+0x231/0x500 [ 261.295910][ T2512] bus_remove_device+0x2dc/0x4a0 [ 261.300845][ T2512] device_del+0x481/0xd30 [ 261.305171][ T2512] ? device_link_add_missing_supplier_links+0x370/0x370 [ 261.312099][ T2512] ? mark_held_locks+0x9f/0xe0 [ 261.316856][ T2512] ? _raw_spin_unlock_irq+0x1f/0x80 [ 261.322050][ T2512] hid_destroy_device+0xe1/0x150 [ 261.326980][ T2512] usbhid_disconnect+0x9f/0xe0 [ 261.331773][ T2512] usb_unbind_interface+0x1bd/0x8a0 [ 261.336972][ T2512] ? __pm_runtime_idle+0xd1/0x320 [ 261.341991][ T2512] ? usb_autoresume_device+0x60/0x60 [ 261.347272][ T2512] device_release_driver_internal+0x432/0x500 [ 261.353333][ T2512] bus_remove_device+0x2dc/0x4a0 [ 261.358278][ T2512] device_del+0x481/0xd30 [ 261.362613][ T2512] ? device_link_add_missing_supplier_links+0x370/0x370 [ 261.369582][ T2512] ? usb_remove_ep_devs+0x3e/0x80 [ 261.374604][ T2512] ? remove_intf_ep_devs+0x13f/0x1d0 [ 261.379918][ T2512] usb_disable_device+0x211/0x690 [ 261.384943][ T2512] usb_disconnect+0x284/0x8d0 [ 261.389635][ T2512] hub_event+0x17ca/0x38f0 [ 261.394056][ T2512] ? hub_port_debounce+0x260/0x260 [ 261.399164][ T2512] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 261.405078][ T2512] ? debug_smp_processor_id+0x2f/0x185 [ 261.410532][ T2512] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 261.416160][ T2512] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 261.422134][ T2512] process_one_work+0x965/0x16a0 [ 261.427071][ T2512] ? lock_release+0x800/0x800 [ 261.431744][ T2512] ? pwq_dec_nr_in_flight+0x310/0x310 [ 261.437126][ T2512] ? rwlock_bug.part.0+0x90/0x90 [ 261.442059][ T2512] worker_thread+0x96/0xe20 [ 261.446559][ T2512] ? process_one_work+0x16a0/0x16a0 [ 261.451844][ T2512] kthread+0x3b5/0x4a0 [ 261.455907][ T2512] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 261.461796][ T2512] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 261.467611][ T2512] ret_from_fork+0x24/0x30 [ 261.473185][ T2512] Kernel Offset: disabled [ 261.477501][ T2512] Rebooting in 86400 seconds..