[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. 2020/06/26 04:39:37 fuzzer started 2020/06/26 04:39:38 dialing manager at 10.128.0.26:33897 2020/06/26 04:39:38 syscalls: 1429 2020/06/26 04:39:38 code coverage: enabled 2020/06/26 04:39:38 comparison tracing: enabled 2020/06/26 04:39:38 extra coverage: enabled 2020/06/26 04:39:38 setuid sandbox: enabled 2020/06/26 04:39:38 namespace sandbox: enabled 2020/06/26 04:39:38 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/26 04:39:38 fault injection: enabled 2020/06/26 04:39:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/26 04:39:38 net packet injection: enabled 2020/06/26 04:39:38 net device setup: enabled 2020/06/26 04:39:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/26 04:39:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/26 04:39:38 USB emulation: enabled 04:42:03 executing program 0: syzkaller login: [ 202.894974][ T6835] IPVS: ftp: loaded support on port[0] = 21 04:42:03 executing program 1: [ 203.049054][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 203.228950][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.245609][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.265690][ T6835] device bridge_slave_0 entered promiscuous mode [ 203.278412][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.286890][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.296506][ T6835] device bridge_slave_1 entered promiscuous mode [ 203.329370][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.343104][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.348917][ T6965] IPVS: ftp: loaded support on port[0] = 21 04:42:03 executing program 2: [ 203.382658][ T6835] team0: Port device team_slave_0 added [ 203.398374][ T6835] team0: Port device team_slave_1 added [ 203.476598][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.483574][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.544094][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.569186][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.594762][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.621921][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 04:42:04 executing program 3: [ 203.683140][ T7001] IPVS: ftp: loaded support on port[0] = 21 [ 203.717929][ T6835] device hsr_slave_0 entered promiscuous mode [ 203.774218][ T6835] device hsr_slave_1 entered promiscuous mode [ 204.023010][ T7054] IPVS: ftp: loaded support on port[0] = 21 04:42:04 executing program 4: [ 204.211159][ T6965] chnl_net:caif_netlink_parms(): no params data found [ 204.436078][ T6835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.501488][ T6835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.555206][ T6835] netdevsim netdevsim0 netdevsim2: renamed from eth2 04:42:05 executing program 5: [ 204.613329][ T6835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.679406][ T7285] IPVS: ftp: loaded support on port[0] = 21 [ 204.716037][ T7001] chnl_net:caif_netlink_parms(): no params data found [ 204.758386][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.768037][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.779902][ T6965] device bridge_slave_0 entered promiscuous mode [ 204.848246][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.855492][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.863173][ T6965] device bridge_slave_1 entered promiscuous mode [ 204.916663][ T7305] IPVS: ftp: loaded support on port[0] = 21 [ 204.959134][ T6965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.992471][ T7054] chnl_net:caif_netlink_parms(): no params data found [ 205.005559][ T6965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.116828][ T6965] team0: Port device team_slave_0 added [ 205.136043][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.158664][ T6965] team0: Port device team_slave_1 added [ 205.208805][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.216225][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.225000][ T7001] device bridge_slave_0 entered promiscuous mode [ 205.233418][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.241657][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.250628][ T7001] device bridge_slave_1 entered promiscuous mode [ 205.262160][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.269954][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.296636][ T6965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.338357][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.346922][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.359584][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.368009][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.394985][ T6965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.450124][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.465721][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.474936][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.481974][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.490343][ T7054] device bridge_slave_0 entered promiscuous mode [ 205.524454][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.537982][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.546926][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.554185][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.562225][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.572093][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.581118][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.588316][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.596929][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.613090][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.631801][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.639593][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.649392][ T7054] device bridge_slave_1 entered promiscuous mode [ 205.740388][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.798533][ T6965] device hsr_slave_0 entered promiscuous mode [ 205.844488][ T6965] device hsr_slave_1 entered promiscuous mode [ 205.884047][ T6965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.891887][ T6965] Cannot create hsr debugfs directory [ 205.920723][ T7285] chnl_net:caif_netlink_parms(): no params data found [ 205.932762][ T7054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.946655][ T7001] team0: Port device team_slave_0 added [ 205.972348][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 205.995830][ T7054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.006642][ T7001] team0: Port device team_slave_1 added [ 206.019190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.094092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.106334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.115840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.125183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.133526][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.142596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.189552][ T6835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.205203][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.213144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.221175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.233496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.262327][ T7054] team0: Port device team_slave_0 added [ 206.275962][ T7054] team0: Port device team_slave_1 added [ 206.282289][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.289392][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.323300][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.379651][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.388385][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.416454][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.458886][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.466153][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.493196][ T7054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.508742][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.516238][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.543395][ T7054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.620194][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.628158][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.636770][ T7305] device bridge_slave_0 entered promiscuous mode [ 206.688125][ T7054] device hsr_slave_0 entered promiscuous mode [ 206.754396][ T7054] device hsr_slave_1 entered promiscuous mode [ 206.803893][ T7054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.811486][ T7054] Cannot create hsr debugfs directory [ 206.898063][ T7001] device hsr_slave_0 entered promiscuous mode [ 206.944585][ T7001] device hsr_slave_1 entered promiscuous mode [ 206.983935][ T7001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.991501][ T7001] Cannot create hsr debugfs directory [ 207.000233][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.008161][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.016427][ T7305] device bridge_slave_1 entered promiscuous mode [ 207.047902][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.055079][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.062845][ T7285] device bridge_slave_0 entered promiscuous mode [ 207.128696][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.136282][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.143709][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.151187][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.162831][ T7285] device bridge_slave_1 entered promiscuous mode [ 207.197284][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.213271][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.269319][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.310416][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.345754][ T7305] team0: Port device team_slave_0 added [ 207.369867][ T6965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.392702][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.416574][ T7305] team0: Port device team_slave_1 added [ 207.430568][ T6965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.480284][ T6965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.543242][ T6965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.617306][ T7285] team0: Port device team_slave_0 added [ 207.682021][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.692554][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.713187][ T7285] team0: Port device team_slave_1 added [ 207.749443][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.757210][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.784554][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.810110][ T7054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.869327][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.877716][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.890558][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.898402][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.924889][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.936745][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.943697][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.971700][ T7285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.992991][ T7054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.037680][ T7054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.095923][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.103725][ T2493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.123544][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.133005][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.159581][ T7285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.184070][ T7054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.254553][ T6835] device veth0_vlan entered promiscuous mode [ 208.338032][ T7305] device hsr_slave_0 entered promiscuous mode [ 208.384676][ T7305] device hsr_slave_1 entered promiscuous mode [ 208.423933][ T7305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.431487][ T7305] Cannot create hsr debugfs directory [ 208.460469][ T6835] device veth1_vlan entered promiscuous mode [ 208.501665][ T7001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.596299][ T7001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.644233][ T7001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.747098][ T7285] device hsr_slave_0 entered promiscuous mode [ 208.804350][ T7285] device hsr_slave_1 entered promiscuous mode [ 208.844855][ T7285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.852436][ T7285] Cannot create hsr debugfs directory [ 208.884424][ T7001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.084994][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.093544][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.111249][ T6835] device veth0_macvtap entered promiscuous mode [ 209.160023][ T6835] device veth1_macvtap entered promiscuous mode [ 209.186244][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.293576][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.309652][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.325837][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.333774][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.342608][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.350755][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.360130][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.376355][ T6965] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.390984][ T7305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.447092][ T7305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.515925][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.541962][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.550761][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.586807][ T7305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.623155][ T7305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.773174][ T7054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.780498][ T7285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.849964][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.860869][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.869965][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.877147][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.885964][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.894710][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.903006][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.910119][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.921210][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.000872][ T7285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.052969][ T7285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.097157][ T7285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.151448][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.182256][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.242440][ T7054] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.280603][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.304944][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.313087][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.335717][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:42:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468e35e6a76a004d19c76773c904c06a6495124f4493717e9aa83bc8cbf19583dd18790fd5a9442252c9d046897003ce45523f0e310100d7fe91e57f2efefe375ad44f5ea200d910a987b5c8ee6e0671e6cc275f5c8d1caf13a8186808ff6739cbc8d4e3890125fa4bf3e6effcd0147fbc3c627e627f26c44635487f06ccc5ddebee6e6e9d3894d2dc05d6ddee34ae941d3d6b35745cf57ab1a181631489d8a8c05ba47f384a78c3d1b6c029c4edbd4757cb0316efd290655f614e3bc9f90a26ccbe55fb0dd8b52403ab100dcd0ae0791bee87da228c7a7701f056a403e064cb670d4b2a583a50737a27e8a0eb6c46e3f3f7fd1e953fc11d329ca168d5b7cd8afd9d4a8052630992487f616ff911c22a52f17b8f61555d1feda96e2a0044ad049af1dbd78b10d84b24a78451510ac37dd85b2adaa61041827f69711fc9288cc24fc505a0ac8a31c8d6ab55d91442d7015b82250ca0dc5fe7ff4ce00271b4ef72d2fd97f35d803e732f026cae043087602842dc69603b6fcc4d3680664bfd742cb090032a0de3a747660b9"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="008000aa931b6c56c5cd760538f385e496c5aea68be08144e34f63a8be03bffae785eca1776df5055be37a402620233b"], 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="00f157c2", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20044855}, 0x800) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x80, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x80000000, 0x0, 0x3, 0x8, 0x7ff, 0xba8}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000180)=0x8) [ 210.367106][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.411184][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.434759][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.455033][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.494964][ T8092] IPVS: ftp: loaded support on port[0] = 21 [ 210.545133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.553631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.585698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.602098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.618153][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.625308][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.635069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.645277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.654837][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.661915][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.671479][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.688345][ T6965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.709104][ T6965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.730001][ T7001] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.770124][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.786628][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.797770][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.808544][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.817236][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.827966][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.860700][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.911253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.920467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.934484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.951309][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.960266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.976144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.988741][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.995871][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.005251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.013577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.027283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.036647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.045687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.053196][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.061440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.070189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.097419][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.123776][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.139532][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.175506][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.189478][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.199039][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.206255][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.239610][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.267408][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.281873][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.291972][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.301444][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.311148][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.319121][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.343671][ T8092] IPVS: ftp: loaded support on port[0] = 21 [ 211.363966][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.371728][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.396703][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.421655][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.433457][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.450256][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.460601][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.477175][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.484364][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.498983][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.512383][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.528026][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.535181][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.550444][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.559105][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.580888][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.597120][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.608755][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.623065][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.639560][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.653036][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.735825][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.747350][ T7001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.825172][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.836194][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.871025][ T6965] device veth0_vlan entered promiscuous mode [ 211.881391][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.892226][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.902353][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.911580][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.920293][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.928806][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.937154][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.945252][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.953920][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.961967][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.969802][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.048441][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.082915][ T6965] device veth1_vlan entered promiscuous mode [ 212.108383][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.122580][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.141900][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.152417][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.169671][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.179642][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.186801][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.195666][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.205186][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.213803][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.221046][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.230932][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.242949][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.258357][ T7305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.271716][ T7305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.320572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.330353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.339826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.352647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.368976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.388187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.407452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.423095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.494409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.502453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.511832][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.520636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.530340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.539842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.549442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.558618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.566677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.579739][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.615376][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.630074][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.654742][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.662986][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.686639][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.696290][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.716158][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.756533][ T7054] device veth0_vlan entered promiscuous mode [ 212.774320][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.783460][ T6965] device veth0_macvtap entered promiscuous mode [ 212.800891][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.819565][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.841351][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.882899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.892561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.945414][ T6965] device veth1_macvtap entered promiscuous mode [ 212.963383][ T7054] device veth1_vlan entered promiscuous mode [ 212.996788][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.009862][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.040555][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.083440][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.102405][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.133774][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.154466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.165087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.183184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.201268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.228027][ T7001] device veth0_vlan entered promiscuous mode [ 213.243166][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.260856][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.273938][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.314443][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.323161][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.333483][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.358117][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.377201][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.393095][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.423512][ T7001] device veth1_vlan entered promiscuous mode [ 213.494270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.503548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.515965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.525316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.551195][ T7305] device veth0_vlan entered promiscuous mode [ 213.613173][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.621685][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.630465][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.641486][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.650556][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.659314][ T2506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.675292][ T7054] device veth0_macvtap entered promiscuous mode [ 213.690877][ T7054] device veth1_macvtap entered promiscuous mode [ 213.709161][ T7001] device veth0_macvtap entered promiscuous mode [ 213.722782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.746123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.755966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.861247][ T7001] device veth1_macvtap entered promiscuous mode 04:42:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20080000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) getpeername$netlink(r2, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, r3, &(0x7f0000000040)=0x1, 0x7) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0xb00000000065808, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x1000, 0x2, 0x1, 0x1ff, 0x7, 0x0, 0x8e2, 0x7}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x10001}, &(0x7f0000000140)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x1fffff000) [ 213.927466][ T7305] device veth1_vlan entered promiscuous mode [ 213.970875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.992064][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.035040][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.054935][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.077059][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.096901][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.142576][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.166316][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.185166][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.204746][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.213803][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.233684][ T7285] device veth0_vlan entered promiscuous mode [ 214.276682][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 214.314766][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.340310][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 214.365738][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.391540][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.415771][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.426769][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.442402][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.459920][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.505623][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.523059][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.541771][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.556163][ T28] audit: type=1804 audit(1593146534.943:2): pid=8142 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir560818306/syzkaller.N5Oje5/1/cgroup.controllers" dev="sda1" ino=15743 res=1 [ 214.556886][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.590248][ T28] audit: type=1804 audit(1593146534.943:3): pid=8144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir560818306/syzkaller.N5Oje5/1/cgroup.controllers" dev="sda1" ino=15743 res=1 [ 214.613897][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.633890][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.664135][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.683542][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 214.714915][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.733363][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 04:42:15 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfffffffe, 0x61, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5}}}}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x10001, 0x1, 0x7f, 0x400, 0x5, 0x1000006, r5}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x1}) [ 214.733775][ T28] audit: type=1804 audit(1593146535.113:4): pid=8139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir560818306/syzkaller.N5Oje5/1/cgroup.controllers" dev="sda1" ino=15743 res=1 [ 214.755311][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.777001][ T28] audit: type=1804 audit(1593146535.133:5): pid=8146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir560818306/syzkaller.N5Oje5/1/cgroup.controllers" dev="sda1" ino=15743 res=1 [ 214.785553][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 214.841732][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.855334][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.870082][ T7285] device veth1_vlan entered promiscuous mode [ 214.878539][ T8149] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 214.879969][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.903108][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.913432][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.923283][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.932887][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.942286][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.952231][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.979989][ T7305] device veth0_macvtap entered promiscuous mode [ 214.999601][ T8149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:42:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa910000008100000008004500002c0000000000069078e000000200000000000000000000000000090000000000000000000000000000041dcf8b7d55575e9110ea1cf51c6e7fc63388bbee661d0524bda68096a1bae3b3c194592712b61a22d210ef593ca3d938ac7ed02b685945ff4c4671c7eea11d02ecfeddb089210aaf384fba91dbe644b0f1e5b3702142c5e87ffc24165444b19c86a8e4dbb1587112e54af7554b01009dd0a7a415396d8da8bd7a31dad83962fb905f01a2"], 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 215.088970][ T7305] device veth1_macvtap entered promiscuous mode [ 215.237843][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.249858][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.262000][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.273292][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.283780][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.296520][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.306900][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.318000][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.330112][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.414876][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.423163][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.453249][ T172] tipc: TX() has been purged, node left! [ 215.462087][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 04:42:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="6907b8a269bd3d248e543fa77a5d983451e17fd5ee37"], 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000005c0)) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000500)) r3 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x370, 0xb8, 0xb8, 0xb8, 0xb8, 0xb8, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'geneve0\x00', 'ip6_vti0\x00'}, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5a, 0x3, 0x18}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6]}, {0xfffd, [0x3]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) [ 215.494868][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.516187][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.560172][ T8170] Cannot find add_set index 0 as target [ 215.589965][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 04:42:16 executing program 3: unshare(0x48000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000007c0)={'bridge0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x570, [0x0, 0x200001c0, 0x200004c4, 0x200004f4], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1392]}, 0x5e8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={@any, 0x0, 0x100, 0xd93}) ioctl$int_in(r2, 0xd6e6, &(0x7f0000000040)=0xffffffff) r3 = accept(r2, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000140)=0x80) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x20044851) [ 215.614287][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.630966][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.642366][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.674826][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.704192][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.730293][ T8174] IPVS: ftp: loaded support on port[0] = 21 [ 215.730841][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.793989][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.815436][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_1 04:42:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468e35e6a76a004d19c76773c904c06a6495124f4493717e9aa83bc8cbf19583dd18790fd5a9442252c9d046897003ce45523f0e310100d7fe91e57f2efefe375ad44f5ea200d910a987b5c8ee6e0671e6cc275f5c8d1caf13a8186808ff6739cbc8d4e3890125fa4bf3e6effcd0147fbc3c627e627f26c44635487f06ccc5ddebee6e6e9d3894d2dc05d6ddee34ae941d3d6b35745cf57ab1a181631489d8a8c05ba47f384a78c3d1b6c029c4edbd4757cb0316efd290655f614e3bc9f90a26ccbe55fb0dd8b52403ab100dcd0ae0791bee87da228c7a7701f056a403e064cb670d4b2a583a50737a27e8a0eb6c46e3f3f7fd1e953fc11d329ca168d5b7cd8afd9d4a8052630992487f616ff911c22a52f17b8f61555d1feda96e2a0044ad049af1dbd78b10d84b24a78451510ac37dd85b2adaa61041827f69711fc9288cc24fc505a0ac8a31c8d6ab55d91442d7015b82250ca0dc5fe7ff4ce00271b4ef72d2fd97f35d803e732f026cae043087602842dc69603b6fcc4d3680664bfd742cb090032a0de3a747660b9"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="008000aa931b6c56c5cd760538f385e496c5aea68be08144e34f63a8be03bffae785eca1776df5055be37a402620233b"], 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="00f157c2", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20044855}, 0x800) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x80, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x80000000, 0x0, 0x3, 0x8, 0x7ff, 0xba8}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000180)=0x8) [ 215.992400][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.005619][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.018063][ T8180] IPVS: ftp: loaded support on port[0] = 21 [ 216.048637][ T7285] device veth0_macvtap entered promiscuous mode 04:42:16 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000300)={'wg0\x00'}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x10001, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$inet(0xffffffffffffffff, &(0x7f0000000340)="853348aa21173a1f28afa12a4ab84280f1655d922e3c1df96be3048707a1f6ad06ddf81649ab3d6882d2f56c171dc9f71396712a253a65c23989a027ae0f30bbd4dd584de30738be2727942323ba3eaf37af3e6a17a15e764954612596a0ea95d801d8ab5dd232c97d966a142f57ac8d6e1f3d98c61ea54aea78395d6915f639d3cb889ed1a14f50dc0c0e4979d51be52816e3d3b09d6d929fdd0dcee14a252de300cd4ace3831a05d623d46f1e96136dee96a8ff81dd5553ccc3afbf8baf91fb053285d46903eeb7895ee374766bbbab299ca5c339000607396c7cf72ba7617", 0xe0, 0x4094, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x20018810, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000000100)=0x8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x4, "c71390", 0x2, 0x8}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x20}, {0x80000006}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 216.164665][ T7285] device veth1_macvtap entered promiscuous mode 04:42:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', r0}, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '(&\xe6'}, {0x20, 'vmnet0,loGPL'}, {0x20, '\xe4cpusetself'}, {}], 0xa, "b4219497000f8dfb8934168a72da4144e160bfa80999dde7f9220688ca4a931725d230cd36cad5555e909294ab1d5c387f5b3fd1b33d7c83c9582675f56bb61ac3e2aaa46e8a341ce77471efaa1682f9872a43cc4b27eec0c9fdf8669ee5"}, 0x87) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r6 = socket(0xa, 0x1, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000), &(0x7f0000000040)=0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) [ 216.359942][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.389428][ T8174] IPVS: ftp: loaded support on port[0] = 21 [ 216.407522][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.457509][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.503772][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.540714][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 04:42:16 executing program 5: unshare(0x40000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in=@remote, 0x4e20, 0x0, 0x4e20, 0x9, 0x2, 0xc0, 0x140, 0x21, 0x0, r0}, {0x6, 0x9, 0x1, 0x1ff, 0x3ff, 0xbf2, 0x4d, 0x1f}, {0x9, 0x2, 0x8, 0x3}, 0x8000, 0x6e6bb2, 0x1, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d5, 0x5f}, 0x2, @in=@rand_addr=0x64010101, 0x34ff, 0x2, 0x1, 0x9f, 0xefffffc1, 0x340, 0xffff9fae}}, 0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) sendto$inet6(r1, &(0x7f0000000180)="8e", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read(r1, &(0x7f0000000300)=""/176, 0xc3321aaf483fe4f6) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 216.575014][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.610790][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.646671][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.660943][ T8228] IPVS: ftp: loaded support on port[0] = 21 [ 216.683768][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.728836][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.799213][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.955698][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.973662][ T3356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.023757][ T8234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.070389][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.091141][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.143896][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.177622][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.209795][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.248693][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.269998][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.302258][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.313781][ T7285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.324749][ T7285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.338517][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.376511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.402050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:42:18 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r1, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 04:42:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x6, 0x9) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00'}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) r4 = socket(0x2, 0x5, 0x3) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000440)=0x400, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="38bccb4530f1744bca23f970a16cfc1f", 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00abd082eb0425bd0008000400ac1e000105000100000000002500070073797374656d5f753a6f62a76a6563745f723a67657474795f6574635f743a73300000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x814}, 0x4840) accept4$netrom(r3, &(0x7f0000000340)={{0x3, @null}, [@bcast, @default, @netrom, @rose, @default, @rose, @rose, @null]}, &(0x7f00000000c0)=0x48, 0x80c00) 04:42:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', r0}, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '(&\xe6'}, {0x20, 'vmnet0,loGPL'}, {0x20, '\xe4cpusetself'}, {}], 0xa, "b4219497000f8dfb8934168a72da4144e160bfa80999dde7f9220688ca4a931725d230cd36cad5555e909294ab1d5c387f5b3fd1b33d7c83c9582675f56bb61ac3e2aaa46e8a341ce77471efaa1682f9872a43cc4b27eec0c9fdf8669ee5"}, 0x87) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r6 = socket(0xa, 0x1, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000), &(0x7f0000000040)=0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) 04:42:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl(r0, 0x8b36, &(0x7f0000000040)) 04:42:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl(r0, 0x8b36, &(0x7f0000000040)) 04:42:18 executing program 2: socket(0x10, 0x800, 0x1) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) close(0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket(0x23, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0x2000000100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/22, 0x16, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x10001, @mcast2, 0xfff}, 0x1c) 04:42:18 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c80)=ANY=[@ANYBLOB="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", @ANYBLOB="ed642b69d65b0eb54521348650acf2d35567455d6056f038fe321a27f2fac769c25fc94c647ebcca25143a151f27bdfa93b2ef56fc652b1191716ce05694bf3233fe9f40d01fb1b421f717503e718e458610818c2f36f0140abb6b859c2963f2cbb9bd5b46406b974ebb5fbd416eedc3b21271", @ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x811, 0x4) [ 218.244990][ T28] audit: type=1804 audit(1593146538.633:6): pid=8318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir392682643/syzkaller.6OZAbw/3/cgroup.controllers" dev="sda1" ino=15776 res=1 [ 218.404525][ T28] audit: type=1804 audit(1593146538.723:7): pid=8318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir392682643/syzkaller.6OZAbw/3/cgroup.controllers" dev="sda1" ino=15776 res=1 [ 218.562457][ T28] audit: type=1804 audit(1593146538.733:8): pid=8318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir392682643/syzkaller.6OZAbw/3/cgroup.controllers" dev="sda1" ino=15776 res=1 [ 218.796957][ T8307] syz-executor.4 (8307) used greatest stack depth: 21904 bytes left 04:42:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1b}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x3}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback={0xc00}}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x9c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001200)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@local, @remote, 0x0, 0xff000000, 0xd, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x3357, 0x81, 0x0, 0x100, 0x8000, 0x3, 'hsr0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0xa}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1b}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) 04:42:21 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x48, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x0, 0x3, {0x2, 0xf0, 0x3}, {0x2, 0xe, 0x4}, 0x1}, {0x0, 0x3, {0x1, 0x0, 0x3}, {0x2, 0xff}, 0xff, 0x1}, {0x3, 0x3, {}, {0x1, 0x1ee}, 0xfd}, {0x0, 0x2, {0x1, 0x1, 0x2}, {0x1, 0x1}, 0xff, 0xfe}], 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'macvlan0\x00', {0x2, 0x4e21, @local}}) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "0344a290e455c6c55524c398913b8e41"}, 0x18) 04:42:21 executing program 2: socket(0x10, 0x800, 0x1) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) close(0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket(0x23, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0x2000000100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/22, 0x16, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x10001, @mcast2, 0xfff}, 0x1c) 04:42:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x6, 0x9) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00'}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) r4 = socket(0x2, 0x5, 0x3) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000440)=0x400, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="38bccb4530f1744bca23f970a16cfc1f", 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00abd082eb0425bd0008000400ac1e000105000100000000002500070073797374656d5f753a6f62a76a6563745f723a67657474795f6574635f743a73300000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x814}, 0x4840) accept4$netrom(r3, &(0x7f0000000340)={{0x3, @null}, [@bcast, @default, @netrom, @rose, @default, @rose, @rose, @null]}, &(0x7f00000000c0)=0x48, 0x80c00) 04:42:21 executing program 4: socket(0x10, 0x800, 0x1) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) close(0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket(0x23, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, 0xffffffffffffffff, 0x0, 0x2000000100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/22, 0x16, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x10001, @mcast2, 0xfff}, 0x1c) 04:42:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r7}}}}}}]}, 0x48}}, 0x0) bind(r1, &(0x7f0000000000)=@ll={0x11, 0x17, r7, 0x1, 0xc0, 0x6, @random="7d58fbacc8b6"}, 0x80) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x400000fd, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x5b) [ 220.842593][ T8350] x_tables: duplicate underflow at hook 1 [ 220.858108][ T8350] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 220.871247][ T172] tipc: TX() has been purged, node left! [ 220.902096][ T8362] x_tables: duplicate underflow at hook 1 [ 220.911530][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.933455][ T8362] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 04:42:21 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x48, 0x4) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x0, 0x3, {0x2, 0xf0, 0x3}, {0x2, 0xe, 0x4}, 0x1}, {0x0, 0x3, {0x1, 0x0, 0x3}, {0x2, 0xff}, 0xff, 0x1}, {0x3, 0x3, {}, {0x1, 0x1ee}, 0xfd}, {0x0, 0x2, {0x1, 0x1, 0x2}, {0x1, 0x1}, 0xff, 0xfe}], 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'macvlan0\x00', {0x2, 0x4e21, @local}}) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "0344a290e455c6c55524c398913b8e41"}, 0x18) [ 220.954142][ T172] tipc: TX() has been purged, node left! [ 220.975852][ T172] tipc: TX() has been purged, node left! [ 221.008278][ T8363] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 221.048381][ T28] audit: type=1804 audit(1593146541.433:9): pid=8349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir211084481/syzkaller.mocHBf/2/cgroup.controllers" dev="sda1" ino=15795 res=1 04:42:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x2010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4044000, &(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000040)=0x8000005, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYBLOB="a900002004000000001000"], 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x84, @dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x3, 'sed\x00', 0x0, 0x4, 0x4}, {@remote, 0x4e23, 0x2000, 0x6, 0x3ff, 0x9}}, 0x44) sendfile(r2, r1, 0x0, 0x100000007) [ 221.207882][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.222884][ T28] audit: type=1804 audit(1593146541.463:10): pid=8347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir392682643/syzkaller.6OZAbw/4/cgroup.controllers" dev="sda1" ino=15796 res=1 04:42:21 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4004031) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400c7cc00000c89afb489cfbacf1bae25ff0000"], 0x14}}, 0x20000050) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)={r3, 0x8000, 0x9, [0x5, 0x2, 0xcc, 0x0, 0x9, 0x8eb, 0x40, 0x8, 0x4]}, &(0x7f00000003c0)=0x1a) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3f, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0x6, {{0xa, 0x4e21, 0xff, @private2={0xfc, 0x2, [], 0x1}, 0x5}}}, 0x88) [ 221.370377][ T28] audit: type=1804 audit(1593146541.503:11): pid=8355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir211084481/syzkaller.mocHBf/2/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 221.535815][ T8391] IPVS: ftp: loaded support on port[0] = 21 [ 221.572612][ T28] audit: type=1804 audit(1593146541.543:12): pid=8355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir211084481/syzkaller.mocHBf/2/cgroup.controllers" dev="sda1" ino=15795 res=1 04:42:22 executing program 3: r0 = socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x8005) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r2 = socket$inet(0x2, 0x802, 0x7fffffff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x3, 0x2e8, 0x5, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xfffffffffffffff0) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) 04:42:22 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 04:42:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1e, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) [ 221.745386][ T28] audit: type=1804 audit(1593146541.553:13): pid=8356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir392682643/syzkaller.6OZAbw/4/cgroup.controllers" dev="sda1" ino=15796 res=1 04:42:22 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x10100, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000480002000000000000000000000000000000000000000000000000002c000c000000000077eb85960000000000000000001000"/87], 0x78}}, 0x0) [ 221.869120][ T28] audit: type=1804 audit(1593146541.553:14): pid=8356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir392682643/syzkaller.6OZAbw/4/cgroup.controllers" dev="sda1" ino=15796 res=1 04:42:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x100000002) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffbffffff, 0x200040fffffffe}) [ 222.040051][ T28] audit: type=1804 audit(1593146542.223:15): pid=8399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir428516984/syzkaller.xpMS7L/4/cgroup.controllers" dev="sda1" ino=15780 res=1 04:42:22 executing program 3: r0 = socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x8005) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r2 = socket$inet(0x2, 0x802, 0x7fffffff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x3, 0x2e8, 0x5, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xfffffffffffffff0) sendfile(r4, r3, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x100000001) 04:42:22 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x386b}, {0x8, 0xb, 0x200}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x8) unshare(0x6c060000) socket(0x0, 0x0, 0x0) unshare(0x6c060000) [ 222.251204][ T28] audit: type=1804 audit(1593146542.233:16): pid=8399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir428516984/syzkaller.xpMS7L/4/cgroup.controllers" dev="sda1" ino=15780 res=1 04:42:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16=r1], 0x3}}, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000020701080004000000000000010000090c000780080001400000b5450c00024000000000000000050c00064000000000000001000900010073797a31000016000c0003400000000080000001440007800800024000000006080096e45ec3ceba1968c943833d72b60140000001010800014000000efd08000140000000000800014000000007080002400000f40608000140000000400800024000001f8008000540000000010c00030e2b3ef2c04ad17adf9c3fcb4000000000000000050c00034000000000c960200c044c8db4861743616e621a"], 0xc0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) connect$nfc_llcp(r2, &(0x7f0000000340)={0x27, 0x1, 0x0, 0x2, 0x9, 0x81, "571216579f5b4f3be497dd5e5257602542ff7c75a646a3b13619922bc5fc6833fb8debe251d351cd3e184bbb9170e7929067b520b29133266f438027ff4fe7", 0x11}, 0x60) getpeername$unix(r2, &(0x7f0000000100), &(0x7f0000000040)=0x6e) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000280)={0x7fffffff, {{0xa, 0x4e21, 0xfdd, @mcast2, 0x95f}}}, 0x88) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 222.411331][ T28] audit: type=1804 audit(1593146542.233:17): pid=8399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir428516984/syzkaller.xpMS7L/4/cgroup.controllers" dev="sda1" ino=15780 res=1 [ 222.498412][ T8450] IPVS: ftp: loaded support on port[0] = 21 [ 222.565797][ T28] audit: type=1804 audit(1593146542.633:18): pid=8388 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir582114293/syzkaller.RFC4PG/7/cgroup.controllers" dev="sda1" ino=15797 res=1 04:42:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2000000000009) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) socket(0x40000000002, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) bind$packet(r1, &(0x7f0000000080)={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @random="324ae22ef311"}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "726166bb17abe2c9", "342e9a7011165d4d300bafa1dcaaa16f5a41e606d1d8176cc3c97c7e9e6a105b", "5589e638", "c0d48bd9b2cfeec3"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) [ 222.618309][ T8455] IPVS: ftp: loaded support on port[0] = 21 04:42:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r2], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)=""/110, 0x6e}, {&(0x7f0000000fc0)=""/225, 0xe1}], 0x2, &(0x7f0000001100)=""/210, 0xd2}}], 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="c8880df3eb2812b0b4091f6fb50b2857d4acb31dd484fc4b108a14eade2869e5e862fcd25e1acab0e9cb26afacceb38ad3cf3a028a83141ca8bdaa3537ff73a7129dd204d66bae03cbddc78bd618a0804364c7f09be827e6bce6481f16b9c5d0d0ce42affc1c2e71b6e404eb1dbf5dbb7e6bae2ae71400d65d8acd4fda0215d44ca775c8a3ebb1222c6bcebed0e071615ffa7dc5e43fe192ac46e77916b1e4625ccc1c4fa0a56ce9d26d62b459ac9da6f1603eacecf4c73660e2"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x10, 0x6, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x880) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r4, 0x804, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x40880) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 04:42:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x285) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x42, {0x2, 0x4e21, @multicast2}, 'batadv_slave_1\x00'}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0x208e24b) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28001700", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf2503000000b8fd0300000000000000000000000000cdc41566"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x285) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x10}) close(r1) [ 222.801057][ T8391] IPVS: ftp: loaded support on port[0] = 21 [ 223.284237][ T8528] IPVS: ftp: loaded support on port[0] = 21 [ 223.358346][ T8533] IPVS: ftp: loaded support on port[0] = 21 04:42:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r2], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)=""/110, 0x6e}, {&(0x7f0000000fc0)=""/225, 0xe1}], 0x2, &(0x7f0000001100)=""/210, 0xd2}}], 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="c8880df3eb2812b0b4091f6fb50b2857d4acb31dd484fc4b108a14eade2869e5e862fcd25e1acab0e9cb26afacceb38ad3cf3a028a83141ca8bdaa3537ff73a7129dd204d66bae03cbddc78bd618a0804364c7f09be827e6bce6481f16b9c5d0d0ce42affc1c2e71b6e404eb1dbf5dbb7e6bae2ae71400d65d8acd4fda0215d44ca775c8a3ebb1222c6bcebed0e071615ffa7dc5e43fe192ac46e77916b1e4625ccc1c4fa0a56ce9d26d62b459ac9da6f1603eacecf4c73660e2"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x10, 0x6, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x880) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r4, 0x804, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x40880) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 04:42:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c65300a671dd1f5b416a751f26216b12253ac7399bc704edb03fdd00c45b8293a3a4288c49eabbf42fc846f9ad85e31d7b611d179a43c10b4a65f268b54f7679cde64c3538b89f61dc8a8ab2396bf0eff1d5e1109c84f2dead11ea0c01c3543089fd293fcc892059ab443"], 0xb) r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd1, 0x0, 0x0) [ 223.666431][ T8552] IPVS: ftp: loaded support on port[0] = 21 04:42:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) write$binfmt_script(r3, &(0x7f0000000540)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x1, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000100)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x2, @dev={[], 0x16}, 'ipvlan1\x00'}}, 0xffffffffffffff4b, &(0x7f0000000000), 0x0, &(0x7f0000000440), 0x60}, 0x4000851) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08000d0000000000053110e82a8dec0fcf23c28ff435dfc761cc0b9edeed7173e0dc7fafe40a89aaeceaffffff0000ec000000d98a69a0fbd5"], 0x34}}, 0x0) 04:42:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x7, 0x8, [@null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000fd1300ff000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x34, 0x28, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) 04:42:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x8a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x2, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) connect$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100, 0x1}, 0x10) [ 224.164140][ T8578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.260966][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.387917][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 04:42:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x6, 'gretap0\x00', {0xfffff683}, 0x9ed8}) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x3}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @empty}, {0x0, 0x0, 0xfac, 0x0, @gue={{0x2}, "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"}}}}}, 0xfca) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000061420002abd7000fddbdf25080000"], 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x60180d5) [ 224.429523][ T8555] IPVS: ftp: loaded support on port[0] = 21 [ 224.521659][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.560512][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 04:42:25 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x24, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) sendfile(r4, r3, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, 0xffffffffffffffff, 0x0, 0x100000000) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="0510000c22"], 0x48}}, 0x0) 04:42:30 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x386b}, {0x8, 0xb, 0x200}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x8) unshare(0x6c060000) socket(0x0, 0x0, 0x0) unshare(0x6c060000) 04:42:30 executing program 5: unshare(0x40000000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) 04:42:30 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000414080025bd7000fbdbdf250800010000000000c200000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004091}, 0xc020) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={{0x2, 0x0, @descriptor="5d0119532d2e3d88"}, 0x1b, 0x0, [], "f12224db3775d8661eb2bb0109a462e40045523d091e31f67fe09c"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000280)={{0x1, 0x0, @descriptor="72b4c4f8002a94f9"}, 0xe0, r3, [], "39d1ddb83bcbdb07597adfef61083abd941cf6776ca77d0e5d8702412f1d8d2e2218e0b6e562d7d260837e4ebb3e7a10dc2715ec1805ca5945ce287eb3f3bffa8561b5d6b80ee082496876a2b1167eb60aea52948f4d6785911da71c31407435c847b7b314609db344a654df7f76147ea128076fb012ed0e4753a80268e148f10197aac8dfbf0e73883468c382156dbeb5dbe6d8ef4f10643ffb5669f2a057ce018b5027bcd4671950135a0b18793f848eb114877a6ecd3fd8ad0ab9ce74953aa3e53b26d7f006393fbe43843fd62140916b8ec874fe7ce179c840b6baa33eb8"}) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r4 = accept4$rose(r2, &(0x7f00000003c0)=@full={0xb, @dev, @null, 0x0, [@rose, @remote, @default, @remote, @netrom, @netrom]}, &(0x7f0000000440)=0x40, 0x80800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x1, 'macsec0\x00'}) 04:42:30 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd43307c529a4ce6be614c2c794f72ebf5fe3178947170201000000000000008258f8dbe82e16cf8db95f5b068a9e00000000000000000000000000000000000000000000000000000000f2000018287ba7d8807c0ee93ea1bb7f00a15deb269d0a91985602763e4d70d404da006a3d6eef8fb7fcdd82eb1e4841a6e5f6c736ca55eca29effe5084e2a8c3a32798a47420748e3607275f93c5fc0eea40f013e18ab940ae4724d98f521cbe75bb22444e03a4f3fd39da854ec5ee5d610884b75c8ac79338717293d65dd15fb587a0000000000000000000000000000e2f143e702a2a7ed64dd0d6850f7cdca0b9930fe66a1d03538c1e864dd8930c74327a9730e4b65a499250a9dc22579aa7f3e2d4d55cabdf0e441b9d17da09d3c45004d2c1fa0a3f7370b2fa5b2d3465f15cdb69daea690f58eba48236c134d2840a028f737720b458684a7336b6133474ee2a03fb870205cfd98b75e74bddf3fa3af70b40ee55bc4187d6391c61ab54a6b0327113ee458d99bc392cbe0948bbcca6a161ebb2f35d286bab1eec9f2c94e3f478d1c9080ff907dd7a7ed71fae51678cd2f956e3ae74b7c9113277a2cf731e93af464f907954c2bc8f442fd8c69c8eb6ac76e5c34811ad1c572f46403975e7abd9675f64d93b1576d20d1aaf79a59356fb380ed2571579faca887262e8f3ab9e02c82b5b292b621e6c3b73bf502f2d7a0399876874368821bba9270173c98eccb713aab17f44e64baad7b9f830f167245f8244f4408d68ce253d48a0e39bdfc"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x53, 0x6f, &(0x7f00000003c0)="c2678d417e26596fe08cc54eccb2227865b91cfda1c867e5373d8806a65b7703d894d8c5e38ba29d6384d33e129db2b98d65cdb003875e2b16337c2488ee78584913c60c20b16bf0aeb7f88e6478e1f148790d", &(0x7f0000000440)=""/111, 0x0, 0x0, 0xf9, 0x7e, &(0x7f00000005c0)="4609dfcf96903cc40749d8b5ddcde1e8a433e25c5b06fee518287ba296a42ef8aa816bf0303120e17938d9fcaeb07fa7813f8b3b0a6d99eceffefc836ac74e119224ea6db16c9e830845b0ea2c19de9d20acb3288d80962ba6f8986bb5f1fa8679daf081b6d71511981d522be8e9e80f3fcdf3fa0a59dc18f815424311188b67579274cb81005c943d2ecc43f7702f2ec6d972a04d4fa101959ebd834dbb1779948370ee84eff5cae9010f0b1eb2a42e3ac77a63b874f81f72a268c8778c98bbbb9a53cf2e980066a4d62e8716739027f4a9946fcc8504b8810e0ccd0385c41a368451e6eefe967e2a67c10028e664bab3cbcd006bd680d432", &(0x7f00000004c0)="90ead887c217a5c071a5e53676fa0571e9e023a60c94a8c9e418dd5a1c0554ee60a3040ebdbd884e12954a1ceff380dddfa3f29bad71917e9dc7103aea7daa35884521a1b0745b02a4fde4f7c04241a38e5d58337d3a80abb3e1ea68879a6c63da3ff6e5115692aa48bd824d71eb36710ab50cfb7fe328f9831e59322bb8"}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r6 = socket(0x11, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1c, r5, 0x301, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r9, r8, 0x0, 0x100000001) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffc01}], &(0x7f0000000080)='GPL\x00', 0x7, 0xcf, &(0x7f00000000c0)=""/207, 0x41000, 0x2, [], r7, 0x12, r8, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb}, 0x10, 0xffffffffffffffff, r0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x13, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d30806", 0x0, 0x403, 0xe00, 0x22d}, 0x28) 04:42:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/134, 0x2b, 0x86, 0x1}, 0x20) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) [ 230.524093][ T8647] lo speed is unknown, defaulting to 1000 04:42:31 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000414080025bd7000fbdbdf250800010000000000c200000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004091}, 0xc020) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={{0x2, 0x0, @descriptor="5d0119532d2e3d88"}, 0x1b, 0x0, [], "f12224db3775d8661eb2bb0109a462e40045523d091e31f67fe09c"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000280)={{0x1, 0x0, @descriptor="72b4c4f8002a94f9"}, 0xe0, r3, [], "39d1ddb83bcbdb07597adfef61083abd941cf6776ca77d0e5d8702412f1d8d2e2218e0b6e562d7d260837e4ebb3e7a10dc2715ec1805ca5945ce287eb3f3bffa8561b5d6b80ee082496876a2b1167eb60aea52948f4d6785911da71c31407435c847b7b314609db344a654df7f76147ea128076fb012ed0e4753a80268e148f10197aac8dfbf0e73883468c382156dbeb5dbe6d8ef4f10643ffb5669f2a057ce018b5027bcd4671950135a0b18793f848eb114877a6ecd3fd8ad0ab9ce74953aa3e53b26d7f006393fbe43843fd62140916b8ec874fe7ce179c840b6baa33eb8"}) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r4 = accept4$rose(r2, &(0x7f00000003c0)=@full={0xb, @dev, @null, 0x0, [@rose, @remote, @default, @remote, @netrom, @netrom]}, &(0x7f0000000440)=0x40, 0x80800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x1, 'macsec0\x00'}) [ 230.586030][ T8647] lo speed is unknown, defaulting to 1000 04:42:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r4, 0x0, 0x100000001) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000050000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x42d, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x48090) [ 230.627062][ T8647] lo speed is unknown, defaulting to 1000 04:42:31 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000414080025bd7000fbdbdf250800010000000000c200000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004091}, 0xc020) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={{0x2, 0x0, @descriptor="5d0119532d2e3d88"}, 0x1b, 0x0, [], "f12224db3775d8661eb2bb0109a462e40045523d091e31f67fe09c"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000280)={{0x1, 0x0, @descriptor="72b4c4f8002a94f9"}, 0xe0, r3, [], "39d1ddb83bcbdb07597adfef61083abd941cf6776ca77d0e5d8702412f1d8d2e2218e0b6e562d7d260837e4ebb3e7a10dc2715ec1805ca5945ce287eb3f3bffa8561b5d6b80ee082496876a2b1167eb60aea52948f4d6785911da71c31407435c847b7b314609db344a654df7f76147ea128076fb012ed0e4753a80268e148f10197aac8dfbf0e73883468c382156dbeb5dbe6d8ef4f10643ffb5669f2a057ce018b5027bcd4671950135a0b18793f848eb114877a6ecd3fd8ad0ab9ce74953aa3e53b26d7f006393fbe43843fd62140916b8ec874fe7ce179c840b6baa33eb8"}) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r4 = accept4$rose(r2, &(0x7f00000003c0)=@full={0xb, @dev, @null, 0x0, [@rose, @remote, @default, @remote, @netrom, @netrom]}, &(0x7f0000000440)=0x40, 0x80800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x1, 'macsec0\x00'}) [ 230.817769][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 230.817784][ T28] audit: type=1804 audit(1593146551.203:27): pid=8659 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir582114293/syzkaller.RFC4PG/11/cgroup.controllers" dev="sda1" ino=15831 res=1 [ 230.950035][ T28] audit: type=1804 audit(1593146551.283:28): pid=8660 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir582114293/syzkaller.RFC4PG/11/cgroup.controllers" dev="sda1" ino=15831 res=1 04:42:31 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000414080025bd7000fbdbdf250800010000000000c200000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004091}, 0xc020) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={{0x2, 0x0, @descriptor="5d0119532d2e3d88"}, 0x1b, 0x0, [], "f12224db3775d8661eb2bb0109a462e40045523d091e31f67fe09c"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000280)={{0x1, 0x0, @descriptor="72b4c4f8002a94f9"}, 0xe0, r3, [], "39d1ddb83bcbdb07597adfef61083abd941cf6776ca77d0e5d8702412f1d8d2e2218e0b6e562d7d260837e4ebb3e7a10dc2715ec1805ca5945ce287eb3f3bffa8561b5d6b80ee082496876a2b1167eb60aea52948f4d6785911da71c31407435c847b7b314609db344a654df7f76147ea128076fb012ed0e4753a80268e148f10197aac8dfbf0e73883468c382156dbeb5dbe6d8ef4f10643ffb5669f2a057ce018b5027bcd4671950135a0b18793f848eb114877a6ecd3fd8ad0ab9ce74953aa3e53b26d7f006393fbe43843fd62140916b8ec874fe7ce179c840b6baa33eb8"}) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r4 = accept4$rose(r2, &(0x7f00000003c0)=@full={0xb, @dev, @null, 0x0, [@rose, @remote, @default, @remote, @netrom, @netrom]}, &(0x7f0000000440)=0x40, 0x80800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x1, 'macsec0\x00'}) 04:42:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r4, 0x0, 0x100000001) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000050000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x42d, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x48090) [ 231.080209][ T8643] IPVS: ftp: loaded support on port[0] = 21 [ 231.093360][ T8648] IPVS: ftp: loaded support on port[0] = 21 [ 231.118787][ T8657] IPVS: ftp: loaded support on port[0] = 21 [ 231.123498][ T28] audit: type=1804 audit(1593146551.283:29): pid=8660 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir582114293/syzkaller.RFC4PG/11/cgroup.controllers" dev="sda1" ino=15831 res=1 04:42:31 executing program 3: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100085067b029b87a0000000000000004000000000", @ANYRES32=r5, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) socketpair(0x27, 0x2, 0x4, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000300)='veth1_to_bond\x00') ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0xffffffff, 0xffffffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8800) [ 231.248113][ T28] audit: type=1804 audit(1593146551.333:30): pid=8642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir428516984/syzkaller.xpMS7L/9/cgroup.controllers" dev="sda1" ino=15822 res=1 [ 231.289332][ T28] audit: type=1804 audit(1593146551.343:31): pid=8663 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir428516984/syzkaller.xpMS7L/9/cgroup.controllers" dev="sda1" ino=15822 res=1 [ 231.298854][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.338772][ T8684] rdma_rxe: rxe_register_device failed with error -23 [ 231.371388][ T8684] rdma_rxe: failed to add lo [ 231.465126][ T28] audit: type=1804 audit(1593146551.783:32): pid=8677 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir582114293/syzkaller.RFC4PG/12/cgroup.controllers" dev="sda1" ino=15824 res=1 [ 231.596927][ T28] audit: type=1804 audit(1593146551.923:33): pid=8670 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir582114293/syzkaller.RFC4PG/12/cgroup.controllers" dev="sda1" ino=15824 res=1 [ 231.640901][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.713624][ T28] audit: type=1804 audit(1593146551.933:34): pid=8670 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir582114293/syzkaller.RFC4PG/12/cgroup.controllers" dev="sda1" ino=15824 res=1 [ 231.770158][ T8647] infiniband syz0: set active [ 231.775215][ T8647] infiniband syz0: added lo [ 231.790131][ T8647] infiniband syz0: Couldn't open port 1 [ 231.796607][ T3352] lo speed is unknown, defaulting to 1000 [ 231.847955][ T8647] general protection fault, probably for non-canonical address 0xdffffc000000008e: 0000 [#1] PREEMPT SMP KASAN [ 231.859703][ T8647] KASAN: null-ptr-deref in range [0x0000000000000470-0x0000000000000477] [ 231.868120][ T8647] CPU: 1 PID: 8647 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 231.876348][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.886412][ T8647] RIP: 0010:rds_ib_add_one+0xbb/0xc90 [ 231.891783][ T8647] Code: 80 3c 02 00 0f 85 45 0a 00 00 49 8b 9c 24 f0 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 70 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 5a [ 231.911387][ T8647] RSP: 0018:ffffc90004926fe0 EFLAGS: 00010206 [ 231.917449][ T8647] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90013dce000 [ 231.925413][ T8647] RDX: 000000000000008e RSI: ffffffff87583458 RDI: 0000000000000470 [ 231.933383][ T8647] RBP: 0000000000000001 R08: ffff88805eae2340 R09: ffffed101237589f [ 231.941356][ T8647] R10: ffff888091bac4f7 R11: ffffed101237589e R12: ffff888091bac000 [ 231.949325][ T8647] R13: ffffffff8a7566a0 R14: 1ffff92000924e07 R15: ffff888091bac4e8 [ 231.957293][ T8647] FS: 00007f250d2ad700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 231.966216][ T8647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.972789][ T8647] CR2: 0000000000e72a30 CR3: 0000000098af5000 CR4: 00000000001406e0 [ 231.980761][ T8647] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.988738][ T8647] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.996700][ T8647] Call Trace: [ 231.999997][ T8647] ? rds_ib_remove_one+0x280/0x280 [ 232.005106][ T8647] add_client_context+0x3b4/0x520 [ 232.010145][ T8647] ? ib_device_get_by_netdev+0x4f0/0x4f0 [ 232.015776][ T8647] enable_device_and_get+0x1cd/0x3b0 [ 232.021060][ T8647] ? add_one_compat_dev+0x800/0x800 [ 232.026253][ T8647] ? rxe_ib_alloc_hw_stats+0xf9/0x130 [ 232.031629][ T8647] ib_register_device+0xa12/0xda0 [ 232.036652][ T8647] ? enable_device_and_get+0x3b0/0x3b0 [ 232.042107][ T8647] ? crypto_create_tfm+0x118/0x2e0 [ 232.047217][ T8647] ? crypto_alloc_tfm+0x124/0x340 [ 232.052237][ T8647] ? ib_device_set_netdev+0x499/0x680 [ 232.057608][ T8647] rxe_register_device+0x4fa/0x621 [ 232.062718][ T8647] rxe_add+0x1353/0x17df [ 232.066954][ T8647] rxe_net_add+0x8c/0xe0 [ 232.071171][ T8647] rxe_newlink+0x34/0x90 [ 232.075387][ T8647] nldev_newlink+0x29e/0x420 [ 232.079946][ T8647] ? nldev_set_doit+0x410/0x410 [ 232.084795][ T8647] ? save_trace+0x5da/0x9f0 [ 232.089283][ T8647] ? lock_release+0x800/0x800 [ 232.093933][ T8647] ? apparmor_capable+0x454/0x8a0 [ 232.098947][ T8647] ? apparmor_capable+0x454/0x8a0 [ 232.103947][ T8647] ? apparmor_cred_prepare+0x750/0x750 [ 232.109376][ T8647] ? apparmor_cred_prepare+0x750/0x750 [ 232.114818][ T8647] ? cap_capable+0x1eb/0x250 [ 232.119394][ T8647] ? ns_capable_common+0xe2/0x100 [ 232.124407][ T8647] ? nldev_set_doit+0x410/0x410 [ 232.129228][ T8647] rdma_nl_rcv+0x586/0x900 [ 232.133614][ T8647] ? rdma_nl_multicast+0x310/0x310 [ 232.138695][ T8647] ? netlink_deliver_tap+0x227/0xb50 [ 232.143955][ T8647] netlink_unicast+0x537/0x740 [ 232.148701][ T8647] ? netlink_attachskb+0x810/0x810 [ 232.153782][ T8647] ? _copy_from_iter_full+0x25c/0x870 [ 232.159126][ T8647] ? __phys_addr_symbol+0x2c/0x70 [ 232.164124][ T8647] ? __check_object_size+0x171/0x437 [ 232.169380][ T8647] netlink_sendmsg+0x882/0xe10 [ 232.174133][ T8647] ? aa_af_perm+0x260/0x260 [ 232.178608][ T8647] ? netlink_unicast+0x740/0x740 [ 232.183518][ T8647] ? netlink_unicast+0x740/0x740 [ 232.188441][ T8647] sock_sendmsg+0xcf/0x120 [ 232.192838][ T8647] ____sys_sendmsg+0x6e6/0x810 [ 232.197574][ T8647] ? kernel_sendmsg+0x50/0x50 [ 232.202222][ T8647] ___sys_sendmsg+0x100/0x170 [ 232.206882][ T8647] ? debug_smp_processor_id+0x2f/0x185 [ 232.212311][ T8647] ? sendmsg_copy_msghdr+0x70/0x70 [ 232.217411][ T8647] ? __fget_files+0x32f/0x500 [ 232.222100][ T8647] ? ksys_dup3+0x3c0/0x3c0 [ 232.226499][ T8647] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 232.232453][ T8647] ? __fget_light+0x20e/0x270 [ 232.237103][ T8647] __sys_sendmsg+0xe5/0x1b0 [ 232.241589][ T8647] ? __sys_sendmsg_sock+0xb0/0xb0 [ 232.246594][ T8647] ? __x64_sys_futex+0x380/0x4f0 [ 232.251508][ T8647] ? do_syscall_64+0x21/0x7d0 [ 232.256156][ T8647] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 232.262106][ T8647] do_syscall_64+0xf6/0x7d0 [ 232.266585][ T8647] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 232.272447][ T8647] RIP: 0033:0x45cb19 [ 232.276312][ T8647] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.295889][ T8647] RSP: 002b:00007f250d2acc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.304276][ T8647] RAX: ffffffffffffffda RBX: 0000000000500fc0 RCX: 000000000045cb19 [ 232.312221][ T8647] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 232.320165][ T8647] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 232.328110][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 232.336056][ T8647] R13: 00000000000009e7 R14: 00000000004d6928 R15: 00007f250d2ad6d4 [ 232.344015][ T8647] Modules linked in: [ 232.352489][ T8647] ---[ end trace 496f5bc2fdae4f8b ]--- [ 232.358531][ T8647] RIP: 0010:rds_ib_add_one+0xbb/0xc90 [ 232.364475][ T8647] Code: 80 3c 02 00 0f 85 45 0a 00 00 49 8b 9c 24 f0 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 70 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 5a [ 232.385400][ T8647] RSP: 0018:ffffc90004926fe0 EFLAGS: 00010206 [ 232.391501][ T8647] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90013dce000 [ 232.399746][ T8647] RDX: 000000000000008e RSI: ffffffff87583458 RDI: 0000000000000470 [ 232.407992][ T8647] RBP: 0000000000000001 R08: ffff88805eae2340 R09: ffffed101237589f [ 232.416034][ T8647] R10: ffff888091bac4f7 R11: ffffed101237589e R12: ffff888091bac000 [ 232.424079][ T8647] R13: ffffffff8a7566a0 R14: 1ffff92000924e07 R15: ffff888091bac4e8 [ 232.432041][ T8647] FS: 00007f250d2ad700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 232.440999][ T8647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.447763][ T8647] CR2: 0000000000e72a30 CR3: 0000000098af5000 CR4: 00000000001406e0 [ 232.457345][ T8647] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.465430][ T8647] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.473392][ T8647] Kernel panic - not syncing: Fatal exception [ 232.480629][ T8647] Kernel Offset: disabled [ 232.484939][ T8647] Rebooting in 86400 seconds..