[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 133.905082][ T8426] sshd (8426) used greatest stack depth: 3904 bytes left Warning: Permanently added '10.128.1.50' (ECDSA) to the list of known hosts. 2020/07/18 02:32:43 fuzzer started 2020/07/18 02:32:43 dialing manager at 10.128.0.26:41463 2020/07/18 02:32:44 syscalls: 2944 2020/07/18 02:32:44 code coverage: enabled 2020/07/18 02:32:44 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/18 02:32:44 extra coverage: enabled 2020/07/18 02:32:44 setuid sandbox: enabled 2020/07/18 02:32:44 namespace sandbox: enabled 2020/07/18 02:32:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/18 02:32:44 fault injection: enabled 2020/07/18 02:32:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/18 02:32:44 net packet injection: enabled 2020/07/18 02:32:44 net device setup: enabled 2020/07/18 02:32:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/18 02:32:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/18 02:32:44 USB emulation: /dev/raw-gadget does not exist 02:36:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000180)={'bond0\x00', @ifru_names='ipvlan0\x00'}) [ 360.643381][ T8470] IPVS: ftp: loaded support on port[0] = 21 [ 360.904132][ T8470] chnl_net:caif_netlink_parms(): no params data found [ 361.141856][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.150762][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.160580][ T8470] device bridge_slave_0 entered promiscuous mode [ 361.175369][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.184018][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.193508][ T8470] device bridge_slave_1 entered promiscuous mode [ 361.240950][ T8470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.255892][ T8470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.304980][ T8470] team0: Port device team_slave_0 added [ 361.316673][ T8470] team0: Port device team_slave_1 added [ 361.365198][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.372373][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.399292][ T8470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.414700][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.423238][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.450916][ T8470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.686011][ T8470] device hsr_slave_0 entered promiscuous mode [ 361.730505][ T8470] device hsr_slave_1 entered promiscuous mode [ 362.131552][ T8470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.193669][ T8470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.256629][ T8470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.359733][ T8470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.756745][ T8470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.804150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.813410][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.837676][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.864204][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.874558][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.884250][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.891670][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.930297][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.939507][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.949464][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.960883][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.968284][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.028454][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.039924][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.050951][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.062006][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.072809][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.083793][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.129498][ T8470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.139996][ T8470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.169618][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.179677][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.189658][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.202183][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.212149][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.274735][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.284150][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.292268][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.323553][ T8470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.388263][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.398874][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.468702][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.478348][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.503027][ T8470] device veth0_vlan entered promiscuous mode [ 363.521547][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.532074][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.581901][ T8470] device veth1_vlan entered promiscuous mode [ 363.640105][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.649787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.659175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.672862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.692366][ T8470] device veth0_macvtap entered promiscuous mode [ 363.709230][ T8470] device veth1_macvtap entered promiscuous mode [ 363.756248][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.771911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.782487][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.791756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.801667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.823816][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.848321][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.858405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:36:22 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1000001, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') 02:36:23 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4009) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 02:36:26 executing program 1: io_setup(0x3, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000000)="59030214edb0000a000aa5c5164a3f435a37", 0xfdcd}]) [ 368.633252][ T8696] IPVS: ftp: loaded support on port[0] = 21 [ 369.212073][ T8696] chnl_net:caif_netlink_parms(): no params data found [ 369.522414][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.529666][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.540294][ T8696] device bridge_slave_0 entered promiscuous mode [ 369.599155][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.606475][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.615932][ T8696] device bridge_slave_1 entered promiscuous mode [ 369.707636][ T8696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.747970][ T8696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.847152][ T8696] team0: Port device team_slave_0 added [ 369.867059][ T8696] team0: Port device team_slave_1 added [ 369.953844][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.962307][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.988426][ T8696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.052695][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.059745][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.087310][ T8696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.278537][ T8696] device hsr_slave_0 entered promiscuous mode [ 370.314204][ T8696] device hsr_slave_1 entered promiscuous mode [ 370.351289][ T8696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.358911][ T8696] Cannot create hsr debugfs directory [ 370.902233][ T8696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.958503][ T8696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.011293][ T8696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.078555][ T8696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 371.365402][ T8696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.444061][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.453293][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.473733][ T8696] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.529218][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.539285][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.550103][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.557459][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.642309][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.651673][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.661717][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.673102][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.680309][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.689259][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.700167][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.711126][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.721865][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.775375][ T8696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.785914][ T8696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.922944][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.933082][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.943848][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.955296][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.965144][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.975676][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.985467][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.039659][ T8696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.151928][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.161163][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.168827][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.177015][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.187174][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.269494][ T8696] device veth0_vlan entered promiscuous mode [ 372.291840][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.302431][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.352118][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.361687][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.388422][ T8696] device veth1_vlan entered promiscuous mode [ 372.520590][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 372.530095][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 372.539605][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.549700][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.567724][ T8696] device veth0_macvtap entered promiscuous mode [ 372.607876][ T8696] device veth1_macvtap entered promiscuous mode [ 372.713077][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.724213][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.738075][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.747623][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.757175][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.766723][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.776686][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.847330][ T8696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.858203][ T8696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.873384][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.884454][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.894448][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.286255][ T8901] skbuff: bad partial csum: csum=2560/2560 headroom=64 headlen=3712 [ 373.436993][ T8908] skbuff: bad partial csum: csum=2560/2560 headroom=64 headlen=3712 02:36:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000010000000000000000000000000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev}, 0x200000e0) 02:36:32 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}], 0x38) 02:36:32 executing program 1: socket(0x1000000000000010, 0x80802, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) write(r0, &(0x7f0000000000)="24000000430001000000f4f9002304000204f5110c0001000201009f0820028001000000", 0x24) [ 374.274815][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.303197][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:36:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 02:36:33 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r7, 0x4, "f78801", "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"}}, 0x110) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)={0x34, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @nested={0x18, 0xc, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4}]}]}, 0x34}, 0x1, 0x60}, 0x0) [ 374.826299][ T8926] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 02:36:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5001000010000307ebff0006f2c6000040040000", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x120}], 0x1, 0x54051) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x207a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x161000, 0x0) getdents64(r1, &(0x7f0000000000)=""/112, 0x70) lseek(r1, 0xfffffffffffffffe, 0x1) getdents64(r1, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x3b291aeaa09c77eb, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x200, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) dup2(r0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) 02:36:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0xfffffff7, 0x1, 0x6}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') setns(r4, 0x10000000) lseek(r4, 0x1ff, 0x0) 02:36:34 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300), 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@delchain={0x70, 0x65, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1}, {0x9, 0x9}, {0xe, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3d}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x20, 0x2, [@TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xffffff00, 0xff, 0xff000000]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240087e744c01e69dfc8a80000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600030000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f"], 0x444}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000180), 0x492492492492785, 0x0) [ 376.195306][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.347676][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:36:35 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r4) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000000)="8c42413228c52a091ea55f3e61038526cda78a2968030e31e8f5359321a8504c839b61ea28a876a7088ddd7e245f020be0ce8d6602c0776b19c4bb0a307d722a1a65d7c293ae2dc62383154741cd40087b5fe30382b1f8938be8858e631fda75792f", 0x62}, {&(0x7f0000000180)="51bf7067f1b73a814ba619e85c368ca9250df76e130b7ac338bac28dde2854d8089bbaaf3b17cf3e55ab9767692c256d523699423a06f03d13153e75ffed61606e7f149b1f752929c27006bb08c79fde9ae35585f80a2eb489672794a57e56fbd8fd766656f51b4c3316c79dcac021077fa9a0297495dafe05b27d4d7803711e47e53e131f7f3f4df7586388", 0x8c}, {&(0x7f0000000240)="758402abfb37032bd0dbd611a48f340ee86c7b49f4f9ae65181927becfb13db3f41f3b77414b54aea7d54a986ffbc0bb025a85739b0afb92a397557c9237a65a47099c4e6aad8664a9711dc9ddad96a3c28154c5a3f79b5a60d00dca5ac61756a48bf18abf0ce780f62e559bf4c4714ab30a3d46baaedb894cb19313ce9ff53f2f531e901c5443c874325ff25a29cf290f0736b8dc68e30e063e51240cf170b986365fea105ace1c94a85c5481c8f2e6c7086a8e14ba83e6de01793b970d19ce83d92c193356533b952f1f", 0xcb}, {&(0x7f0000000100)="b3ff8833ed7c13d521943d2de0ab1e513259f8e8b154589d897ea3cf6db34b", 0x1f}, {&(0x7f0000000880)="091f94d1559b225138d0ec86a6a3f2b6cac0bd50eb6ec226fad396bb94b3ae0c0a1fd816b96a67780e57367554db4018b09750a13406d9fe2e264380a4e31fcf3af812be8d414852997fd2e537e3f4eec350ce17f1dd1510fa29266df55c8d1d42d0c351491cddae00fba3e687f705112a8fe7f6a7c75fa39cd6339a0c9cf9401bce95102f1f4b49837b5422437eedd94ec23b263bf041fc329cfd17ae2f8a1de8a5fb271efad36827763d40c1e88fd1ea8773507c9773148c79686b8ae4b30367b3fd826d25a210ead4b1d8b365cb7598c09cf6769949e706b876f36a78c5a6204349930aea91d4", 0xe8}, {&(0x7f0000000980)="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", 0x1000}], 0x6, 0x3f) close(r2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xed) ioctl$UI_DEV_CREATE(r5, 0x5501) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 376.704785][ T8948] input: syz1 as /devices/virtual/input/input5 [ 376.866055][ T8948] input: syz1 as /devices/virtual/input/input6 02:36:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010001fff000000deff00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r5, r7) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@private0, 0x4e24, 0x1, 0x4e20, 0x2, 0xa, 0x20, 0x20, 0xff, 0x0, r7}, {0x100000001, 0xcd, 0x76a87e09, 0x5, 0x3e95, 0x8, 0x3, 0x1}, {0x100000001, 0x5000, 0x29, 0x8}, 0x7fffffff, 0x6e6bb5, 0x1, 0x1, 0x0, 0x7}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x3501, 0x4, 0x1, 0x4b, 0x8, 0x7}}, 0xe8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 02:36:53 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4009) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 02:36:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="dbffffff", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 02:36:53 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0xfffffff7) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0x2752f6f4, 0x1ce, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98090e, 0x3, [], @value=0x8000}}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xfffffffffffffffd) ioctl$TCFLSH(r0, 0x540b, 0x0) syz_open_pts(r0, 0x22c001) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x7}, 0x8000}}, 0x18) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000180)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000005c0)={0x1, 0x0, 0x8, 0x18, 0x8f, &(0x7f00000001c0)}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000600)=""/220) mkdirat(r2, &(0x7f0000000700)='./file0\x00', 0x104) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740)='/dev/kvm\x00', 0xc100, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000780)={0x800, 0x3, 0x2, 0x3, 0x200, 0x1e, 0x2}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x2, 0x0, {0x6, 0x4, 0x2}}, 0x28) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snapshot\x00', 0x20000, 0x0) ioctl(r4, 0x6f1d, &(0x7f0000000840)="a8af1255a38134c4405c4b7562a91a4aaca09ddfd94a544e859ae82cfa4e7aebae695d176fbdc9c7ab4170c87f38b9dccbbc66810793b0f0b1447d7c5b0f5a4f990b121b59fcac663d46a57515ddad0dc163eafb113561b26a61d3fbaa59d0a6") fcntl$setflags(r0, 0x2, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000900)={0xe75, 0x800000, 0x6, 0x1, 0x0, "39730020064843c09c8a870812fe77d919b808"}) 02:36:53 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x7, 0x1}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x62000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0x9a, ""/154}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=""/79, 0x4f, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r2, 0x10, &(0x7f0000000380)={&(0x7f00000001c0)=""/167, 0xa7, r3}}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x200001, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r4, r5, 0x9}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000480)={@broadcast, @multicast1, @empty}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x8000, 0x748, 0xffff, 0x9, {{0x21, 0x4, 0x3, 0x7, 0x84, 0x68, 0x0, 0x3f, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xc7, 0x1, 0x2, [{@multicast1, 0x9}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x58f}, {@broadcast, 0x800}, {@multicast2, 0x3ff}]}, @cipso={0x86, 0x37, 0x0, [{0x1, 0x5, "4751aa"}, {0x0, 0x11, "ff80ecc57e906b73600d78e6080327"}, {0x2, 0xf, "18ad1fc384eec10da1647acbcc"}, {0x1, 0xc, "61a3d832e6e5db8f87e4"}]}, @rr={0x7, 0xb, 0x55, [@loopback, @private=0xa010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x21, 0x4, 0xfff, 0x31, @empty, @mcast2, 0x8000, 0x40, 0x7, 0x5}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x0, 0xd05, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x20}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf9}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) r9 = semget(0x0, 0x3, 0x102) semop(r9, &(0x7f00000009c0)=[{0x2, 0x6, 0x1000}, {0x0, 0x1000, 0x800}, {0x0, 0x1, 0x1000}, {0x0, 0xff, 0x800}, {0x4, 0x80, 0x800}, {0x2, 0x9, 0x1800}, {0x1, 0x40, 0x1800}], 0x7) write$eventfd(0xffffffffffffffff, &(0x7f0000000a00)=0x7, 0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/dlm-monitor\x00', 0x10800, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000ac0)={0x41, 0x2}, 0x10) [ 394.376508][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.396885][ T8969] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 394.514902][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.534990][ T8974] 8021q: adding VLAN 0 to HW filter on device ipvlan3 02:36:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r3 = dup(r2) fadvise64(r2, 0x0, 0x0, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1, 0x0) msgrcv(r7, &(0x7f00000000c0)={0x0, ""/81}, 0x59, 0x0, 0x4800) msgctl$IPC_RMID(r7, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) sendfile(r2, r3, 0x0, 0x80006) [ 394.989802][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.228705][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.434153][ T8985] IPVS: ftp: loaded support on port[0] = 21 [ 395.442423][ T8986] IPVS: ftp: loaded support on port[0] = 21 02:36:54 executing program 1: clone(0x3a3dd40084000f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x25, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x48aac2bf}, 0x9c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={r2, 0x5, 0x101, 0x8, 0x9, 0x400, 0x9, 0x4e, {r5, @in6={{0xa, 0x4e24, 0x6, @local, 0x8000}}, 0x1, 0x0, 0x44, 0x7, 0xfffffffe}}, &(0x7f0000000300)=0xb0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x1000}) r6 = memfd_create(&(0x7f0000000400)='/proc%sys/net/ip~4/vs/ignonnQled\x00\x00\x00\x00\x00\x00e\xc0nh\xdb(', 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r6, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc0000004, 0x0}, 0x0, 0x8, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_matches\x00') [ 395.852804][ T9026] device veth1_macvtap left promiscuous mode [ 396.080781][ T9025] syz-executor.1 (9025) used greatest stack depth: 3816 bytes left 02:36:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4c182) r1 = memfd_create(&(0x7f0000001000)='\x10\x01\x00t\xb3-\rG\xfe\xff\x1e\x00\x00\x00\x00\xad\x8d\x00\x00\xbdqQ@\x1e\x00\x00\x00\x00\x00\x00\x00\x00p\xaf\x83\x930\x1b7\xad?\xdb\x86\xc4I\xb9\x03$\x93\xb0\xdd\x1a9\x8d\xf4\xaaB\xae \xc23\x93\xb4\xc7\x149\x94tAxI\xc4N\xbbMA\xd5\xf1\x86\xf3,\xf5\x18\xa5r\xeb\xbd\x8e\xf6\x8f\xdd\xa7\xab\xa7z\x96jg\xe6\xb3;\xc5\xfa\xc0\xe3\xc5hY6\xd5\x1e\xdb\n\xda\xa4\x7f \xc8u\x10\xd7\xa6\xb0\x99sf\xacP\xac\x01\x00\x00\x00p\xd9\xdb\x02MC\x8e63\xd9\xac\x81\xe2\xb4&\x82\xd4\"\xd6\xdc\xbcC\xc2\xb0\x85L7`\x16[\xc0.\xa4\x86\xf0\xcf\x0e\x15\xc2\xbd\xbc\xa0\xe4\xc0Vp>n\x02K\n\xd0\f\xa3\x8d\xef+\xd2\xb3\xc5\x1d[\xd8\xcc\xeb\xb35n\x06\x0f \xe1\xc4\xf2L\xc9\xd81>0qO\xc1\xbe\xb33\xab\xe6z\x01\x00\xd9\x9d\xad\xadA\x85\xde\xbe/+\x16\x9b\xf8%sO\xf8\xbc\xb5\"\xfd\xbb\x00X\xeb=\xd3\xab1\xfai\xbf\x04M@\xfe!\xd01b\x93\xf6\xc0\x87\xaeN\xfd\xca\xee\xcduN\x82\xea\xbbu\x98\xfeo\x88e\xa2T(<\xb8 \xbdZ\xbar\xb3T\x97R/`\x8d\x8a\x8a9b\xc3l\xe69?\xf0\x9fd=+\xb71\x81/\xb0C%\xc2\x186\xb9iU\xc2\xb4-\xe0\x16)d\x97m_/\xc03\xf8(\xf7S\xd7\xf9\x8d\t\x8c\xa4B\x98e.,\x92#\x1a\xe1\xe6P\xb0\xa9 \x02_x1\xf3\xf2!\xb569\x8b\xc4\xb7\xe1H\x9cK\xb4-\xbe\xfcG=5\xb3/xfT\xd3\xe5\xb2\xf4+\xac6\xaf\xc28\"\xa3\xba]q\x18\f\xd0\n\x00'/429, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000600)="4bae27d51767221870f84e24e196723ec4862c9c56e9fa4110bb7455654ae168c1d4311f301530533182ac42418d93e4ba0cdf1c80f8ce57677ad495bdbe975cf22bf3c92582a1ca15d84cc79efee57090c74901917d5c3094e318280bcfd8b813ff6ca2103f0958156bc4bec41d0100ddf4945de025becfe49cd54734c98cec8c2e70c168bb1b21a4d0d3f60567c9cccd3c18dd1137b0624d0ff741", 0x9c}, {&(0x7f00000001c0)="32a6d988a5192ca675a42532c041afe4852caf7d6a67b300c370356186f44ea1b5cf2a68e75c4152b4b6c4", 0x2b}, {&(0x7f0000000000)="fa687ac415", 0x5}, {&(0x7f0000000340)="fdbcf3ee295433d041a0f5108064d6bd02d966d85e47941d40924e450d6419edee242dacbf8677c900000000000000000048d621afe78154df686418ab9ad1749fe7d01cd6a80a0f72abd41468351bd1e3a73d6332d5fb64926d551029988aaf7b1d", 0x62}, {&(0x7f00000003c0)="bff53dd1d7d258ef4955ab1e15455792eed1e7339f78a45b00e2593ba1a07a6a2b430a3ea5", 0x25}, {&(0x7f0000000540)="9624aec046b1f9358207aa625639aa4b4f70f3db6cd3a9614868859a682142eb800c6b56825037152e54eb31b46ed373a786508a4fd2c2c6504bbe405c1f4f20c7a40cd6626f67c5215eb58893d65266f8d2e1b9043df6b73b89850ec84952eaf8231e57598e80e7d6e22fcf3416d74da99bfe79b726c0ead4c0f2765c0d20430d1ed2c64ae5eb790967073240ce85587bbdf0187955cda77dc28801ba9a9f38828e767fdfa6d10a", 0xa8}], 0x6, 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x0, 0x9, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e5008aa682ebf7888c305bee6fd6"}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000101605078000000000e2ff00", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getdents(r7, &(0x7f0000000400)=""/101, 0x65) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x10}, 0x4000845) [ 396.341326][ T8985] chnl_net:caif_netlink_parms(): no params data found 02:36:55 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x80081) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = dup(r1) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "1965eb1c18a9ac99", "46cc8fe8eb15bedea68dae1578f0cb91", 'y1\a:', "6fa87e20815a8d49"}, 0x28) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000180)=0xfb, 0x4) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f00000001c0)) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000200)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x101080, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9b0000, 0xc17, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x990a7b, 0x9, [], @ptr=0x1}}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340)='gtp\x00') r8 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x10000, 0x2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r7, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1044) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c424157}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91732bf}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f00b09a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb5650b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35adab91}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x679c3ecc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24456c06}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49136fb3}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x185d65f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8eee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c69eeff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ddf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58f0bc6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14e9a2fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5919071a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcb85db2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x24040050) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000700)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0x7, [@multicast2, @rand_addr=0x64010102, @remote, @remote, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x2c) [ 396.611026][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 396.694170][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.703037][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.712341][ T8985] device bridge_slave_0 entered promiscuous mode 02:36:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e21, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000000)='veth1_to_bridge\x00', 0x9, 0xef, 0xf2ab}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) fchmod(r2, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x6e}) [ 396.848953][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.856476][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.865871][ T8985] device bridge_slave_1 entered promiscuous mode [ 397.053474][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.125758][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.291371][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.298737][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.308171][ T8986] device bridge_slave_0 entered promiscuous mode [ 397.364575][ T8985] team0: Port device team_slave_0 added [ 397.425622][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.432876][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.442509][ T8986] device bridge_slave_1 entered promiscuous mode [ 397.455724][ T8985] team0: Port device team_slave_1 added [ 397.665701][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.672749][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.699877][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.723305][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.790045][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.950348][ T8986] team0: Port device team_slave_0 added [ 397.997719][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.004752][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.031160][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.049292][ T8986] team0: Port device team_slave_1 added [ 398.157853][ T9295] IPVS: ftp: loaded support on port[0] = 21 [ 398.213813][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.221353][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.247430][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.513751][ T8985] device hsr_slave_0 entered promiscuous mode [ 398.546558][ T8985] device hsr_slave_1 entered promiscuous mode [ 398.592421][ T8985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.600099][ T8985] Cannot create hsr debugfs directory [ 398.616953][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.623985][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.650066][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.043267][ T8986] device hsr_slave_0 entered promiscuous mode [ 399.086912][ T8986] device hsr_slave_1 entered promiscuous mode [ 399.126139][ T8986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.133763][ T8986] Cannot create hsr debugfs directory [ 399.172025][ T9295] chnl_net:caif_netlink_parms(): no params data found 02:36:58 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {0x0, 0x3}, {0x0, 0x6}], 0x3) semctl$GETZCNT(r1, 0x1, 0x10, 0x0) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000140)=""/125) ptrace$pokeuser(0x6, r0, 0x4e7, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x2e]}, 0x3c) r3 = dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x20106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000500400105}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf258452898ef9071de0071672c11b4d2b355ef00b47a0e12d589b5e0e1d803e2d51f4e9098ade36b5743bd5d74d55c92f265d2a79604bcf55f291cdfa9f194f20091cb0620b72d0bb855d75d7000047d26ebf36b345dc3dbf9066b28fde3342b8babf2ec3f94762ea20e51713e9757d", @ANYRES32=r3, @ANYBLOB="08000a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x882200}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) [ 399.840021][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.847730][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.857491][ T9295] device bridge_slave_0 entered promiscuous mode [ 399.872571][ T8985] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 399.934449][ T8985] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 399.984797][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.992210][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.001903][ T9295] device bridge_slave_1 entered promiscuous mode 02:36:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000984500000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01020000f80000000000020000000900070000007a300000000014000480080002400000000008000140000000060900030073797a3200000000140000001000010000000000000000000000000a9242381e9ab243c6ab54b555d71c644b929f4413fadde2ccd765d34c38ae57c43aab376eb858"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) clock_getres(0x3, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a40000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010800007c0012800b000100697036746e6c00006c00028006000f000000000008000100", @ANYRES32=0x0, @ANYBLOB="0600ec00000008000700ff0700001400020000000505dc0000000000000000000001050006000800000006000f0002000000060011004e2000001400030000000000000000000000ffffffffffff08000a0076b96e07c0d3f98613b52603c489c945e63ea7eed4b92b746034d223bc8cf5536c5e2739f5277afa23b1016593904ef5091a3663fcdbeb4443e6a6e58c8e70a32d12979a1d72d5afda90a55ab2f06a1781709d8dffeddddf1a0aeb3e7ed16c5507456056128f79c06b8f5086503f446f9cbbca4e", @ANYRES32=0x0, @ANYBLOB="72f37afe85951c349a7cca2ae7a8f2929178ba965d4ca5279904a0c2434e6ef001e538e255a728901008504afe640d3de0309c38966e7ba703d20f929cf0688d9b2ceffd1f35cde55c2c2ca1b81e4e1882b3a0365507001e4ac4409292664f4500"], 0xa4}}, 0x0) [ 400.028895][ T8985] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.151363][ T8985] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.224950][ T8986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.279064][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.288584][ T9539] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.330987][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.346035][ T8986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.426640][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.437666][ T9550] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.464527][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.489288][ T8986] netdevsim netdevsim2 netdevsim2: renamed from eth2 02:36:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000201010200d80000cd084bf04ec026b880b2e78720e4940000000003000000000000000000018008000102ac1414aa08000200ac1e000114000180ea000100e00057fd0800020064010100"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) [ 400.566861][ T8986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.712766][ T9295] team0: Port device team_slave_0 added [ 400.721195][ T9561] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.729232][ T9561] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.811056][ T9295] team0: Port device team_slave_1 added [ 400.848768][ T9561] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.989014][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.996789][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.022926][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.117999][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.203930][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.231382][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.241133][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.257756][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.264781][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.293755][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.315285][ T8985] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.364460][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.382619][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.391924][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.401348][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.411198][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.420537][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.427802][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.603945][ T8985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.615097][ T8985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.716954][ T9295] device hsr_slave_0 entered promiscuous mode [ 401.760313][ T9295] device hsr_slave_1 entered promiscuous mode [ 401.797908][ T9295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.805619][ T9295] Cannot create hsr debugfs directory [ 401.826531][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.836065][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.845898][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.855215][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.862472][ T8651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.881134][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.891913][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.901775][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.911719][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.918968][ T8651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.927961][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.938828][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.948642][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.957954][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.965148][ T8651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.974095][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.984950][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 401.995464][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.005734][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.016321][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.026505][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.037420][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.048019][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.058211][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.067913][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.078241][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.088038][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.097700][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.108190][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.118456][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.128031][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.137547][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.147168][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.197003][ T8986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.277129][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.294295][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.304147][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.313988][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.338363][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.357640][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.365331][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.548694][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.559875][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.569953][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.578454][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.638414][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.716847][ T8985] device veth0_vlan entered promiscuous mode [ 402.725242][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 402.737172][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.777534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.787036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.825402][ T8985] device veth1_vlan entered promiscuous mode [ 402.895250][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 402.904612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 402.914027][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.925039][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.072215][ T8985] device veth0_macvtap entered promiscuous mode [ 403.082403][ T9295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 403.172150][ T8985] device veth1_macvtap entered promiscuous mode [ 403.182111][ T9295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 403.238353][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 403.249455][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.262246][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 403.271616][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.281279][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.295366][ T8986] device veth0_vlan entered promiscuous mode [ 403.306109][ T9295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 403.352935][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 403.363531][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.372661][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.416320][ T9295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.478775][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 403.489548][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.499657][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 403.510251][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.524266][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.546739][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 403.556870][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 403.569316][ T8986] device veth1_vlan entered promiscuous mode [ 403.700068][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 403.710719][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.721232][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 403.731846][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.745964][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.754062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 403.764215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 403.856599][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 403.866598][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.925567][ T8986] device veth0_macvtap entered promiscuous mode [ 403.984867][ T8986] device veth1_macvtap entered promiscuous mode [ 404.075397][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 404.086084][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.096140][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 404.108744][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.118723][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 404.129288][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.144406][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.153336][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 404.162887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.172269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.182480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.347679][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.392899][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 404.403547][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.413616][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 404.424292][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.434312][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 404.444874][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.459312][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.473602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 404.483885][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 404.512334][ T9634] Unknown ioctl -2147199741 [ 404.544303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.553653][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.569960][ T9634] Unknown ioctl -2147199741 [ 404.579568][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.658025][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.668460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.677965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.685161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.694207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.704311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.714017][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.721442][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.912972][ T9295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.923540][ T9295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.078577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.087980][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.100505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.111405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.122099][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.132626][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.143452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.153887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.163725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.174173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.183898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.268504][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.368783][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.398699][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.407770][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.415448][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.558415][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.568521][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.690232][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.700986][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.740432][ T9295] device veth0_vlan entered promiscuous mode [ 405.798647][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.808474][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.852971][ T9295] device veth1_vlan entered promiscuous mode [ 406.035040][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.045218][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.073505][ T9295] device veth0_macvtap entered promiscuous mode [ 406.113220][ T9295] device veth1_macvtap entered promiscuous mode [ 406.249614][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 406.260918][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.270921][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 406.281511][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.291496][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 406.302047][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.312009][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 406.322593][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.337034][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.347791][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.357213][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.366653][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.376823][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.651896][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 406.662743][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.673058][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 406.683601][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.693558][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 406.704094][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.714495][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 406.725002][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.739182][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.746698][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.756758][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:37:14 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4009) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 02:37:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000201010200d80000cd084bf04ec026b880b2e78720e4940000000003000000000000000000018008000102ac1414aa08000200ac1e000114000180ea000100e00057fd0800020064010100"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 02:37:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x4, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="0000000014001280090001007866726d00000000"], 0x34}}, 0x0) 02:37:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$apparmor_exec(r3, &(0x7f0000000000)={'stack ', '\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf'}, 0xff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 02:37:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x12, r0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) 02:37:14 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @local}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x6, 0x7, 0x9, @empty, @rand_addr=' \x01\x00', 0x1, 0x1, 0x736, 0x25}}) r7 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000680)=0x14) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f00000006c0)=0x80000000) r11 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x80000000}}, [0xfffffffffffffffb, 0xee, 0x80200000, 0x73aa, 0x7, 0x0, 0xdd90, 0xffffffff7fffffff, 0x20, 0x100000000, 0xc0000000000000, 0x0, 0x5, 0xdc9, 0x1]}, &(0x7f0000000840)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000000880)={r12, 0x2, 0x97, "ba3dc0a5c299fdbf718dfc1a9d4d77dc5ce7653580038e0a7efe648a4b10711b42aee174b36a90e13f2475a723d27b36d3f421335a93b11833c6f3a29e0ad3cefd9e7a23a8ae44f94280af338560367a00bcdfce0cb3ae6819cacd68a92b5ec020fd91ff7bf9348016af80801526f18ed7d0f3d55488c0f4ddebfc5d37c165eee7e50804906752752a03fb6b9c9e34132fdd3b3ae92578"}, 0x9f) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000940), &(0x7f0000000980)=0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/dlm_plock\x00', 0x402002, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000000bc0)={0x2, 0xfff, 0x4201, 0xffffffff, 0x1, 0x8000, 0x230, 0x76}, &(0x7f0000000c00)=0x20) [ 415.915935][ T9659] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 415.936491][ T9662] IPVS: ftp: loaded support on port[0] = 21 02:37:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000201010200d80000cd084bf04ec026b880b2e78720e4940000000003000000000000000000018008000102ac1414aa08000200ac1e000114000180ea000100e00057fd0800020064010100"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 02:37:15 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000001400)='/dev/midi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0245725, 0x0) 02:37:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000ff0000000000000008000100000001"], 0x24}}, 0x0) [ 416.534160][ T9696] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000080000000000c953", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 02:37:15 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 02:37:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000201010200d80000cd084bf04ec026b880b2e78720e4940000000003000000000000000000018008000102ac1414aa08000200ac1e000114000180ea000100e00057fd0800020064010100"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) [ 416.942447][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 417.032936][ T9707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.040346][ T9707] IPv6: NLM_F_CREATE should be set when creating new route [ 417.047756][ T9707] IPv6: NLM_F_CREATE should be set when creating new route [ 417.126021][ T9710] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.161573][ T9712] IPVS: ftp: loaded support on port[0] = 21 [ 418.069679][ T9712] chnl_net:caif_netlink_parms(): no params data found [ 418.295892][ T9666] IPVS: ftp: loaded support on port[0] = 21 [ 418.560244][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.568430][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.577970][ T9712] device bridge_slave_0 entered promiscuous mode [ 418.729120][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.736353][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.746215][ T9712] device bridge_slave_1 entered promiscuous mode [ 418.881521][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.925008][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.043721][ T9712] team0: Port device team_slave_0 added [ 419.075033][ T9712] team0: Port device team_slave_1 added [ 419.169646][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.176710][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.204857][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.259025][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.266072][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.293620][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.401420][ T8471] tipc: TX() has been purged, node left! [ 419.416035][ T9712] device hsr_slave_0 entered promiscuous mode [ 419.474130][ T9712] device hsr_slave_1 entered promiscuous mode [ 419.517373][ T9712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.525068][ T9712] Cannot create hsr debugfs directory [ 420.080860][ T9712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.161347][ T9712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.231388][ T9712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.380783][ T9712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 420.813686][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.862956][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.872533][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.906048][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.948873][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.958896][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.968435][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.975635][ T9645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.042098][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.051585][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.061694][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.071651][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.079045][ T9645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.088223][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.099335][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.110312][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.121186][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.202537][ T9712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.213634][ T9712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.253345][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.263213][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.274021][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.284837][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.294558][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.304997][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.314736][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.432237][ T9712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.448541][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.457815][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.465531][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.566531][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.577735][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.661377][ T9712] device veth0_vlan entered promiscuous mode [ 421.680228][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 421.690194][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.727595][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.736615][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.749574][ T9712] device veth1_vlan entered promiscuous mode [ 421.831859][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 421.842092][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 421.851583][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 421.861573][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.883653][ T9712] device veth0_macvtap entered promiscuous mode [ 421.904233][ T9712] device veth1_macvtap entered promiscuous mode [ 421.920290][ T8471] tipc: TX() has been purged, node left! [ 421.958285][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 421.968839][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.978847][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 421.989420][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.999421][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.009994][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.019982][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.030539][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.040494][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.051005][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.065429][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.075565][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 422.085178][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 422.094978][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 422.105324][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 422.145272][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.155977][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.170747][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.181978][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.191918][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.202472][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.212395][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.222908][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.232843][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 422.243355][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.257716][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.269885][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 422.279953][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:37:27 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4009) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 02:37:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04400000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/65, 0x40}, {&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000340)=""/161, 0xa1}], 0x5, &(0x7f0000000480)=""/251, 0xfb}}, {{&(0x7f0000000580)=@can, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)=""/182, 0xf2}, {&(0x7f00000006c0)=""/26, 0xfffffe26}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/110, 0xfffffe06}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f00000008c0)=""/188, 0xbc}], 0x6, &(0x7f0000000a00)=""/77, 0x4d}}], 0x2, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xffffffc8) 02:37:27 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 02:37:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:37:27 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 02:37:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x1}) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {}, 0x0, [], [0x0, 0x2]}, 0x45c) [ 429.265930][ T9955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.370669][ T9964] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:28 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 02:37:28 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000240)='./file0/../file0\x00', 0x0) 02:37:28 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff00000300a492bb5bb20ecc841f8f4c"], 0x1}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000000ffff"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) 02:37:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) [ 429.822317][ T9974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.933705][ T9980] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:28 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 02:37:28 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 430.300929][ T9987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:37:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 02:37:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 02:37:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x1a0, 0x1a0, 0x270, 0x270, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_macvtap\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 02:37:39 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) 02:37:39 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000300)={{0x1}}, 0x2, &(0x7f0000000340)}}) 02:37:39 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106736d173f0fc7ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a742"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x100000000000006b, &(0x7f00000000c0), 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 440.386460][T10004] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x207200) [ 440.464008][T10007] Cannot find add_set index 0 as target 02:37:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 02:37:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r7) [ 440.633665][ C1] sd 0:0:1:0: [sg0] tag#2709 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 440.644431][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB: Test Unit Ready [ 440.651306][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.661087][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.670962][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.680811][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.690620][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.700406][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.710212][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.720072][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02:37:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x1) r1 = creat(0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="93b20000eeff00000000010000000000000001410000001c001700020000000000006574"], 0x38}}, 0x0) recvfrom$inet(r1, &(0x7f00000001c0)=""/169, 0xa9, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) [ 440.729889][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.739694][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.749516][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.759306][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.769099][ C1] sd 0:0:1:0: [sg0] tag#2709 CDB[c0]: 00 00 00 00 00 00 00 00 02:37:39 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) [ 441.040013][T10030] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:39 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) 02:37:39 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x1}) close(r0) close(r1) 02:37:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x1) r1 = creat(0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="93b20000eeff00000000010000000000000001410000001c001700020000000000006574"], 0x38}}, 0x0) recvfrom$inet(r1, &(0x7f00000001c0)=""/169, 0xa9, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) 02:37:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 02:37:39 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) [ 441.388777][ C1] sd 0:0:1:0: [sg0] tag#2710 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 441.399384][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB: Test Unit Ready [ 441.406036][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.415905][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.426412][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.436266][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.446073][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.455883][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.465699][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.475518][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.485338][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.495142][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.504929][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.514775][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.524564][ C1] sd 0:0:1:0: [sg0] tag#2710 CDB[c0]: 00 00 00 00 00 00 00 00 [ 441.654633][T10051] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) 02:37:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x1) r1 = creat(0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="93b20000eeff00000000010000000000000001410000001c001700020000000000006574"], 0x38}}, 0x0) recvfrom$inet(r1, &(0x7f00000001c0)=""/169, 0xa9, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) 02:37:40 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) 02:37:40 executing program 4: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019280)=""/102390, 0x192d4) 02:37:40 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 02:37:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x1) r1 = creat(0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="93b20000eeff00000000010000000000000001410000001c001700020000000000006574"], 0x38}}, 0x0) recvfrom$inet(r1, &(0x7f00000001c0)=""/169, 0xa9, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) 02:37:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) [ 441.958338][T10062] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100033000080", 0x14}], 0x1}, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc020662a, &(0x7f0000000080)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000000c0)={0x1, @output}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 02:37:40 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 02:37:40 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) 02:37:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) 02:37:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00008000000000001e009d00"}) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x8eaf9f6fa38a627b}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x101, 0x0, 0x0) dup3(r1, r0, 0x0) [ 442.369128][T10077] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d04}]}) 02:37:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) [ 442.633512][T10085] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:37:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) 02:37:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100033000080", 0x14}], 0x1}, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc020662a, &(0x7f0000000080)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000000c0)={0x1, @output}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 02:37:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="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", 0x150) 02:37:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000000)}}, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, 0x0, &(0x7f0000000080)) [ 443.023396][T10097] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 02:37:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100033000080", 0x14}], 0x1}, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc020662a, &(0x7f0000000080)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000000c0)={0x1, @output}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 02:37:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 02:37:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4020ae76, &(0x7f0000000180)={0xa}) 02:37:42 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) 02:37:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000180)={0x21, 0x3, 0x0, {0x2}}, 0x21) 02:37:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000000)}}, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, 0x0, &(0x7f0000000080)) [ 443.645586][T10117] xt_cgroup: invalid path, errno=-2 02:37:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 443.697509][T10125] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 02:37:42 executing program 2: socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x0, r0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 443.917230][T10136] xt_cgroup: invalid path, errno=-2 02:37:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 02:37:42 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:37:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d600100033000080", 0x14}], 0x1}, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc020662a, &(0x7f0000000080)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000000c0)={0x1, @output}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 02:37:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) 02:37:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000000)}}, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, 0x0, &(0x7f0000000080)) [ 444.192389][T10144] xt_cgroup: invalid path, errno=-2 02:37:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 444.213290][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.324606][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.337041][T10150] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 444.439077][T10162] xt_cgroup: invalid path, errno=-2 02:37:43 executing program 4: unshare(0x2040400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) pread64(r0, 0x0, 0xf0ff7f00000000, 0x0) 02:37:43 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000001a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed3) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) 02:37:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) 02:37:43 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0xe) 02:37:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffff84, 0x0, 0xa00}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 02:37:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000000)}}, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, 0x0, &(0x7f0000000080)) 02:37:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x4000000000df) 02:37:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400009000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cae481ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) 02:37:43 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 02:37:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)="be658d4f3db1a19c4de3df6c0b53958a02c7aec554ba470b2a50b8152413d47ab7d150a6341961cd", 0x45c}, {0x0, 0x49f}, {&(0x7f0000000100)="559a4c24b68ec8"}, {&(0x7f0000000180)="161405"}], 0x3) 02:37:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2140020}, 0xc, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 445.308757][T10191] ===================================================== [ 445.315745][T10191] BUG: KMSAN: uninit-value in audit_receive+0x186f/0x6d30 [ 445.322860][T10191] CPU: 1 PID: 10191 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 445.331529][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.341579][T10191] Call Trace: [ 445.344882][T10191] dump_stack+0x1df/0x240 [ 445.349242][T10191] kmsan_report+0xf7/0x1e0 [ 445.353670][T10191] __msan_warning+0x58/0xa0 [ 445.358188][T10191] audit_receive+0x186f/0x6d30 [ 445.362975][T10191] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 445.369746][T10191] ? netlink_deliver_tap+0xdb5/0xe90 [ 445.375047][T10191] ? kmsan_set_origin_checked+0x95/0xf0 [ 445.380602][T10191] ? kmsan_get_metadata+0x11d/0x180 [ 445.385814][T10191] netlink_unicast+0xf9e/0x1100 [ 445.390681][T10191] ? audit_net_exit+0xd0/0xd0 [ 445.395375][T10191] netlink_sendmsg+0x1246/0x14d0 [ 445.400353][T10191] ? netlink_getsockopt+0x1440/0x1440 [ 445.405728][T10191] kernel_sendmsg+0x433/0x440 [ 445.410433][T10191] sock_no_sendpage+0x235/0x300 [ 445.415314][T10191] ? sock_no_mmap+0x30/0x30 [ 445.419851][T10191] sock_sendpage+0x1e1/0x2c0 [ 445.424465][T10191] pipe_to_sendpage+0x38c/0x4c0 [ 445.429321][T10191] ? sock_fasync+0x250/0x250 [ 445.433935][T10191] __splice_from_pipe+0x565/0xf00 [ 445.438971][T10191] ? generic_splice_sendpage+0x2d0/0x2d0 [ 445.444643][T10191] generic_splice_sendpage+0x1d5/0x2d0 [ 445.450129][T10191] ? iter_file_splice_write+0x1800/0x1800 [ 445.455853][T10191] direct_splice_actor+0x1fd/0x580 [ 445.461029][T10191] ? kmsan_get_metadata+0x4f/0x180 [ 445.466158][T10191] splice_direct_to_actor+0x6b2/0xf50 [ 445.471534][T10191] ? do_splice_direct+0x580/0x580 [ 445.476611][T10191] do_splice_direct+0x342/0x580 [ 445.481493][T10191] do_sendfile+0x101b/0x1d40 [ 445.486135][T10191] __se_sys_sendfile64+0x2bb/0x360 [ 445.491251][T10191] ? kmsan_get_metadata+0x4f/0x180 [ 445.496378][T10191] __x64_sys_sendfile64+0x56/0x70 [ 445.501438][T10191] do_syscall_64+0xb0/0x150 [ 445.505951][T10191] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.511839][T10191] RIP: 0033:0x45c1d9 [ 445.515730][T10191] Code: Bad RIP value. [ 445.519791][T10191] RSP: 002b:00007f3d4b452c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.528224][T10191] RAX: ffffffffffffffda RBX: 0000000000025a00 RCX: 000000000045c1d9 [ 445.536193][T10191] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 445.544182][T10191] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 445.552153][T10191] R10: 00004000000000df R11: 0000000000000246 R12: 000000000078bf0c [ 445.560125][T10191] R13: 0000000000c9fb6f R14: 00007f3d4b4539c0 R15: 000000000078bf0c [ 445.568129][T10191] [ 445.570446][T10191] Uninit was stored to memory at: [ 445.575480][T10191] kmsan_internal_chain_origin+0xad/0x130 [ 445.581202][T10191] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 445.587179][T10191] kmsan_memcpy_metadata+0xb/0x10 [ 445.592204][T10191] __msan_memcpy+0x43/0x50 [ 445.596620][T10191] _copy_from_iter_full+0xbfe/0x13b0 [ 445.601905][T10191] netlink_sendmsg+0xfaa/0x14d0 [ 445.606756][T10191] kernel_sendmsg+0x433/0x440 [ 445.611433][T10191] sock_no_sendpage+0x235/0x300 [ 445.616285][T10191] sock_sendpage+0x1e1/0x2c0 [ 445.620878][T10191] pipe_to_sendpage+0x38c/0x4c0 [ 445.625726][T10191] __splice_from_pipe+0x565/0xf00 [ 445.630751][T10191] generic_splice_sendpage+0x1d5/0x2d0 [ 445.636207][T10191] direct_splice_actor+0x1fd/0x580 [ 445.641318][T10191] splice_direct_to_actor+0x6b2/0xf50 [ 445.646709][T10191] do_splice_direct+0x342/0x580 [ 445.651559][T10191] do_sendfile+0x101b/0x1d40 [ 445.656148][T10191] __se_sys_sendfile64+0x2bb/0x360 [ 445.661257][T10191] __x64_sys_sendfile64+0x56/0x70 [ 445.666277][T10191] do_syscall_64+0xb0/0x150 [ 445.670797][T10191] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.676675][T10191] [ 445.679013][T10191] Uninit was created at: [ 445.683298][T10191] kmsan_save_stack_with_flags+0x3c/0x90 [ 445.688930][T10191] kmsan_alloc_page+0xb9/0x180 [ 445.693690][T10191] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 445.699234][T10191] alloc_pages_current+0x672/0x990 [ 445.704342][T10191] push_pipe+0x605/0xb70 [ 445.708582][T10191] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 445.714308][T10191] do_splice_to+0x4fc/0x14f0 [ 445.719592][T10191] splice_direct_to_actor+0x45c/0xf50 [ 445.724961][T10191] do_splice_direct+0x342/0x580 [ 445.729808][T10191] do_sendfile+0x101b/0x1d40 [ 445.734398][T10191] __se_sys_sendfile64+0x2bb/0x360 [ 445.739506][T10191] __x64_sys_sendfile64+0x56/0x70 [ 445.744528][T10191] do_syscall_64+0xb0/0x150 [ 445.749032][T10191] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.754938][T10191] ===================================================== [ 445.761862][T10191] Disabling lock debugging due to kernel taint [ 445.768987][T10191] Kernel panic - not syncing: panic_on_warn set ... [ 445.775582][T10191] CPU: 1 PID: 10191 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 445.785631][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.795698][T10191] Call Trace: [ 445.799006][T10191] dump_stack+0x1df/0x240 [ 445.803353][T10191] panic+0x3d5/0xc3e [ 445.807294][T10191] kmsan_report+0x1df/0x1e0 [ 445.811810][T10191] __msan_warning+0x58/0xa0 [ 445.816326][T10191] audit_receive+0x186f/0x6d30 [ 445.821119][T10191] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 445.827194][T10191] ? netlink_deliver_tap+0xdb5/0xe90 [ 445.832492][T10191] ? kmsan_set_origin_checked+0x95/0xf0 [ 445.838044][T10191] ? kmsan_get_metadata+0x11d/0x180 [ 445.843282][T10191] netlink_unicast+0xf9e/0x1100 [ 445.848148][T10191] ? audit_net_exit+0xd0/0xd0 [ 445.852860][T10191] netlink_sendmsg+0x1246/0x14d0 [ 445.857829][T10191] ? netlink_getsockopt+0x1440/0x1440 [ 445.863204][T10191] kernel_sendmsg+0x433/0x440 [ 445.867898][T10191] sock_no_sendpage+0x235/0x300 [ 445.872778][T10191] ? sock_no_mmap+0x30/0x30 [ 445.877284][T10191] sock_sendpage+0x1e1/0x2c0 [ 445.881894][T10191] pipe_to_sendpage+0x38c/0x4c0 [ 445.886746][T10191] ? sock_fasync+0x250/0x250 [ 445.891382][T10191] __splice_from_pipe+0x565/0xf00 [ 445.896421][T10191] ? generic_splice_sendpage+0x2d0/0x2d0 [ 445.902090][T10191] generic_splice_sendpage+0x1d5/0x2d0 [ 445.907576][T10191] ? iter_file_splice_write+0x1800/0x1800 [ 445.913299][T10191] direct_splice_actor+0x1fd/0x580 [ 445.918433][T10191] ? kmsan_get_metadata+0x4f/0x180 [ 445.923556][T10191] splice_direct_to_actor+0x6b2/0xf50 [ 445.928931][T10191] ? do_splice_direct+0x580/0x580 [ 445.933995][T10191] do_splice_direct+0x342/0x580 [ 445.938872][T10191] do_sendfile+0x101b/0x1d40 [ 445.943505][T10191] __se_sys_sendfile64+0x2bb/0x360 [ 445.948619][T10191] ? kmsan_get_metadata+0x4f/0x180 [ 445.953759][T10191] __x64_sys_sendfile64+0x56/0x70 [ 445.958801][T10191] do_syscall_64+0xb0/0x150 [ 445.964197][T10191] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.970094][T10191] RIP: 0033:0x45c1d9 [ 445.973977][T10191] Code: Bad RIP value. [ 445.978037][T10191] RSP: 002b:00007f3d4b452c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.986472][T10191] RAX: ffffffffffffffda RBX: 0000000000025a00 RCX: 000000000045c1d9 [ 445.994458][T10191] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 446.002430][T10191] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 446.010397][T10191] R10: 00004000000000df R11: 0000000000000246 R12: 000000000078bf0c [ 446.018372][T10191] R13: 0000000000c9fb6f R14: 00007f3d4b4539c0 R15: 000000000078bf0c [ 446.027450][T10191] Kernel Offset: 0x1c000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 446.039073][T10191] Rebooting in 86400 seconds..