[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 71.744864][ T27] audit: type=1800 audit(1585827647.806:25): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 71.788681][ T27] audit: type=1800 audit(1585827647.816:26): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 71.826602][ T27] audit: type=1800 audit(1585827647.816:27): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. 2020/04/02 11:40:58 fuzzer started 2020/04/02 11:40:59 dialing manager at 10.128.0.26:35359 2020/04/02 11:40:59 syscalls: 2996 2020/04/02 11:40:59 code coverage: enabled 2020/04/02 11:40:59 comparison tracing: enabled 2020/04/02 11:40:59 extra coverage: enabled 2020/04/02 11:40:59 setuid sandbox: enabled 2020/04/02 11:40:59 namespace sandbox: enabled 2020/04/02 11:40:59 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/02 11:40:59 fault injection: enabled 2020/04/02 11:40:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/02 11:40:59 net packet injection: enabled 2020/04/02 11:40:59 net device setup: enabled 2020/04/02 11:40:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/02 11:40:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:43:13 executing program 0: 11:43:13 executing program 1: syzkaller login: [ 217.744895][ T9629] IPVS: ftp: loaded support on port[0] = 21 [ 217.950445][ T9629] chnl_net:caif_netlink_parms(): no params data found 11:43:14 executing program 2: [ 218.011087][ T9632] IPVS: ftp: loaded support on port[0] = 21 [ 218.121565][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.138774][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.149069][ T9629] device bridge_slave_0 entered promiscuous mode [ 218.178235][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.186102][ T9637] IPVS: ftp: loaded support on port[0] = 21 [ 218.198923][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.207071][ T9629] device bridge_slave_1 entered promiscuous mode [ 218.257249][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.291099][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:43:14 executing program 3: [ 218.378272][ T9629] team0: Port device team_slave_0 added [ 218.435929][ T9629] team0: Port device team_slave_1 added [ 218.450143][ T9632] chnl_net:caif_netlink_parms(): no params data found [ 218.582791][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.600614][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.629821][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 11:43:14 executing program 4: [ 218.674221][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.681312][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.708695][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.741973][ T9637] chnl_net:caif_netlink_parms(): no params data found [ 218.748115][ T9643] IPVS: ftp: loaded support on port[0] = 21 [ 218.794980][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.816974][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.841824][ T9632] device bridge_slave_0 entered promiscuous mode [ 218.905512][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.920572][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.940562][ T9632] device bridge_slave_1 entered promiscuous mode 11:43:15 executing program 5: [ 219.001889][ T9629] device hsr_slave_0 entered promiscuous mode [ 219.029345][ T9629] device hsr_slave_1 entered promiscuous mode [ 219.116047][ T9632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.162823][ T9632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.183097][ T9646] IPVS: ftp: loaded support on port[0] = 21 [ 219.187290][ T9648] IPVS: ftp: loaded support on port[0] = 21 [ 219.271779][ T9632] team0: Port device team_slave_0 added [ 219.293177][ T9632] team0: Port device team_slave_1 added [ 219.346358][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.353579][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.380029][ T9632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.404367][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.411624][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.419774][ T9637] device bridge_slave_0 entered promiscuous mode [ 219.429816][ T9637] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.436904][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.445422][ T9637] device bridge_slave_1 entered promiscuous mode [ 219.456689][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.463952][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.490273][ T9632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.600868][ T9632] device hsr_slave_0 entered promiscuous mode [ 219.639031][ T9632] device hsr_slave_1 entered promiscuous mode [ 219.698811][ T9632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.706936][ T9632] Cannot create hsr debugfs directory [ 219.733618][ T9637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.777700][ T9637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.841021][ T9637] team0: Port device team_slave_0 added [ 219.879841][ T9637] team0: Port device team_slave_1 added [ 219.888685][ T9643] chnl_net:caif_netlink_parms(): no params data found [ 219.900447][ T9629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.945160][ T9629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.007043][ T9629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.078990][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.086152][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.112585][ T9637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.135935][ T9629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.191912][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.199155][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.227927][ T9637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.335747][ T9648] chnl_net:caif_netlink_parms(): no params data found [ 220.420884][ T9637] device hsr_slave_0 entered promiscuous mode [ 220.479024][ T9637] device hsr_slave_1 entered promiscuous mode [ 220.528806][ T9637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.528841][ T9637] Cannot create hsr debugfs directory [ 220.561715][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.568972][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.577134][ T9643] device bridge_slave_0 entered promiscuous mode [ 220.594834][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.602203][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.611028][ T9643] device bridge_slave_1 entered promiscuous mode [ 220.711005][ T9646] chnl_net:caif_netlink_parms(): no params data found [ 220.763282][ T9643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.792773][ T9643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.833387][ T9632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.943836][ T9632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.021419][ T9632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.082834][ T9643] team0: Port device team_slave_0 added [ 221.092074][ T9637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.170127][ T9643] team0: Port device team_slave_1 added [ 221.189229][ T9632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.241847][ T9637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.300720][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.307836][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.316517][ T9648] device bridge_slave_0 entered promiscuous mode [ 221.331545][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.338759][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.346707][ T9648] device bridge_slave_1 entered promiscuous mode [ 221.367152][ T9637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.444335][ T9637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.481502][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.488509][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.514952][ T9643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.528689][ T9648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.538406][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.545989][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.572562][ T9643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.592209][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.600929][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.611035][ T9646] device bridge_slave_0 entered promiscuous mode [ 221.622624][ T9648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.658735][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.665982][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.674833][ T9646] device bridge_slave_1 entered promiscuous mode [ 221.708493][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.733827][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.754687][ T9648] team0: Port device team_slave_0 added [ 221.792600][ T9643] device hsr_slave_0 entered promiscuous mode [ 221.839163][ T9643] device hsr_slave_1 entered promiscuous mode [ 221.878828][ T9643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.886439][ T9643] Cannot create hsr debugfs directory [ 221.908683][ T9648] team0: Port device team_slave_1 added [ 221.954368][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.968013][ T9646] team0: Port device team_slave_0 added [ 222.024121][ T9646] team0: Port device team_slave_1 added [ 222.055035][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.062773][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.089554][ T9648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.127188][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.137501][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.151202][ T9629] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.159310][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.166432][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.193379][ T9648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.216305][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.227258][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.259881][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.275723][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.282935][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.309159][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.348247][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.357482][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.366526][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.373809][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.422184][ T9648] device hsr_slave_0 entered promiscuous mode [ 222.459058][ T9648] device hsr_slave_1 entered promiscuous mode [ 222.498888][ T9648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.506499][ T9648] Cannot create hsr debugfs directory [ 222.556807][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.565253][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.574225][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.583266][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.590627][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.599820][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.628778][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.637989][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.653902][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.700994][ T9646] device hsr_slave_0 entered promiscuous mode [ 222.759176][ T9646] device hsr_slave_1 entered promiscuous mode [ 222.798903][ T9646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.806810][ T9646] Cannot create hsr debugfs directory [ 222.837431][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.848199][ T9632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.862746][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.872536][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.935167][ T9629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.947162][ T9629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.960174][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.968476][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.977676][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.985853][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.994378][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.003866][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.016423][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.034382][ T9632] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.045138][ T9643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.135705][ T9643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.172148][ T9643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.233164][ T9643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.293027][ T9637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.300924][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.310435][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.318942][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.326095][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.369347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.412526][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.423118][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.431283][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.440814][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.449803][ T2885] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.456943][ T2885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.464853][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.473786][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.504255][ T9637] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.520907][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.567224][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.576363][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.599145][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.608477][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.617696][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.627969][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.637090][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.644241][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.652267][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.660906][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.669710][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.678453][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.687192][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.694319][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.702648][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.711112][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.750118][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.758392][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.771608][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.791969][ T9632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.805627][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.822967][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.831749][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.843419][ T9648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.892027][ T9648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.962070][ T9648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.021036][ T9648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.118838][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.128300][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.137555][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.149883][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.214831][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.225462][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.233597][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.245278][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.254080][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.266484][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.280036][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.299033][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.309127][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.317415][ T9646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.361382][ T9646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.424347][ T9629] device veth0_vlan entered promiscuous mode [ 224.438523][ T9637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.452877][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.463694][ T9646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.523322][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.531680][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.541323][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.551139][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.560453][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.568349][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.589971][ T9646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.660617][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.670240][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.695122][ T9643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.704107][ T9629] device veth1_vlan entered promiscuous mode [ 224.745067][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.756412][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.765330][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.776701][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.787514][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.798556][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.814153][ T9643] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.833056][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.841472][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.860445][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.872918][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.882140][ T2775] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.889398][ T2775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.900524][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.912506][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.921301][ T2775] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.928823][ T2775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.938875][ T9637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.947995][ T9632] device veth0_vlan entered promiscuous mode [ 224.985748][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.996222][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.005762][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.042618][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.051512][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.061115][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.070766][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.083091][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.100247][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.109617][ T9629] device veth0_macvtap entered promiscuous mode [ 225.123292][ T9632] device veth1_vlan entered promiscuous mode [ 225.138918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.147160][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.157789][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.167110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.183980][ T9629] device veth1_macvtap entered promiscuous mode [ 225.220210][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.228368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.238507][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.247790][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.256444][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.265355][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.274345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.283243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.293486][ T9643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.331153][ T9648] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.365579][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.374083][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.385529][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.394621][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.404821][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.411989][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.421318][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.438075][ T9637] device veth0_vlan entered promiscuous mode [ 225.463004][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.472428][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.485537][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.493699][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.502089][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.512233][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.521185][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.528473][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.543435][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.556968][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.573383][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.584122][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.593708][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.603957][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.629547][ T9632] device veth0_macvtap entered promiscuous mode [ 225.642614][ T9637] device veth1_vlan entered promiscuous mode [ 225.671102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.684037][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.693415][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.703644][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.712046][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.722700][ T9632] device veth1_macvtap entered promiscuous mode [ 225.785140][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.793684][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.817807][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.832077][ T9643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.852052][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.917015][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.926793][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.943757][ T9646] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.954374][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.966566][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.978175][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.003079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.011235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.019917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.027671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.036702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.047107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.056454][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.065600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.074660][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.097442][ T9632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.109607][ T9632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.125791][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.201011][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.210952][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.220566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.235589][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.245035][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.252212][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.263289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.272157][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.289137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.297651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.308791][ T9637] device veth0_macvtap entered promiscuous mode [ 226.325472][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.351264][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.369339][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.377680][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.393381][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.404297][ T2775] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.411630][ T2775] bridge0: port 2(bridge_slave_1) entered forwarding state 11:43:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000524", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa00, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x10}, {0x0, 0x1}, @quote}], 0x1c) bind$rds(r1, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) [ 226.520556][ T9637] device veth1_macvtap entered promiscuous mode [ 226.529286][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.529972][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.558283][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.567685][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.674126][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.692932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.702109][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.716249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.739374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.762869][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.790081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.814544][ T9648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.825702][ T9643] device veth0_vlan entered promiscuous mode [ 226.847472][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.895591][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.919957][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.931052][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:43:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf4ed}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x840) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x20c000, 0x0) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000340)) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_cancel(0x0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="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", 0x1000, 0x0, 0x0, 0x3}, &(0x7f00000014c0)) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r8, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81024e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 226.943887][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.954777][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.969405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.977773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.987249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.000240][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.041650][ T9681] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.081413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 11:43:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000000)=0x200, 0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x48280, 0x0) ioctl$TIOCSETD(r6, 0x5414, &(0x7f00000000c0)=0x9) r7 = dup2(r2, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000006b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x5b) [ 227.115057][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.146118][ T9643] device veth1_vlan entered promiscuous mode [ 227.158508][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.178439][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.206607][ T9637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.221636][ T9637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.234147][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.265368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 227.283666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.292034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.301011][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:43:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/26, 0x1a) getdents(r1, &(0x7f0000000080)=""/33, 0x21) sendmsg$IPSET_CMD_RENAME(r1, 0x0, 0x40801) sched_setscheduler(r0, 0x5, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) [ 227.311105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.321278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 11:43:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5, 0x5, 0x1, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x40) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000080)=""/36, &(0x7f00000000c0)=0x24) [ 227.399860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.408541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.442029][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.538623][ C1] hrtimer: interrupt took 46037 ns [ 227.538764][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.574609][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 11:43:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x3, 0x2000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x5], 0x0, 0x140001}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xff], 0x0, 0x23c1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0xc008ae88, &(0x7f0000001a40)={"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"}) [ 227.683060][ T9643] device veth0_macvtap entered promiscuous mode [ 227.724341][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.745093][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.773063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.785736][ T9702] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 227.795205][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.840448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.857345][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.991100][ T9648] device veth0_vlan entered promiscuous mode [ 228.059177][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.075907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.127317][ T9643] device veth1_macvtap entered promiscuous mode [ 228.189240][ T9648] device veth1_vlan entered promiscuous mode [ 228.208247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 11:43:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 228.250173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.277049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 11:43:24 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5414, &(0x7f0000000080)=0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000800000003000000700200000000000000000000400100000000000000000000d8010000d8010000d8010000d8010000d801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140010000000000000000000000000000000000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000006800706879736465760000000000000000000000000000000000000000000000697036677265300000000000000000000000000000000000000000000000000076657468305f766c616e00000000000000000000000000000000000000000000000b00000000000040005443504f505453545249500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000085ec00000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000dd15adf476874f657404cda29554d04024bdea8e04d48d9573881150ccacb90bc1b083e4027a7b1b9abd801989499ec78cd1950a65241b1cc511c3114e5debede7321de537ad81c404a6b53a4b607890e3caa3705ddcfef0cbd4", @ANYBLOB="4d32a545781adc4191be7a9ba348937ba0d6ef4a1394aa538ee9a11aaa808d3d18588195e7f6d1237eae426ddcc9019c9a50d69dc9e4e78fc11aec5947d80b7832ebf4d64dd6091bbc69ce4fa174762d92af850f1f98ea8181df4881ac45183a8bae4f23838afc04e1b13d14690e8e83b02456a76e560579228d4bebe383e206aa6f3ccd9aab04620bcb68d7a4ee005542e27a29d55a96dd01e9ff531f2ea64868932095a6b6f6ebff17456643813e4a3bb880bb2d25c0dbddd05e1e632417fa19e44fe291c46ceee09541bc695542ac2214ce23584d90436a87d48573555bd3fab7355af6b8f016f59e74c3a93ccdd3ad", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r2, @ANYRES64, @ANYPTR64, @ANYBLOB="ca284feaf016931b172c23a8cdec9555c828d8ee0fbbb599cb1db59b6edbb34fc3d548788a45e0842ab27cb2d5fbdcbafeb9bfa0aae8783eb259b10f80d49513e39b031bef7cbb25970ffefa7db69205b45e9b845d4e4bd002aeb4193fbda0277c32032a993e0807f6c4a0ee1da1ec6f4e55e8c19efe26c302ab0aafd4e3aa14a5bab454e97a1506aa619eba3389cd651598c4bc97d5d95a4d7ac0a512d6aee191eb044adb8e48c89215286c7443e217f0273b51d660ea67be0a3b5a37450ecc419f1a8368e21dddc628c9f3a998f43e09dd52b651368e0e5e61c0f15bbcaaa161", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r5, @ANYPTR64]], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="40238acc94dad67ec3fa67133bd0e52d1ba14e19951f1bc2a62ce9f03d8d37d6f02b5c8cf869feb8a927b0c85413bc8631743b6050dd176e9a9956fc89d19e2087384779c46d7b6397625892379c9e283fe4c42a3a0e4dcd00f670497dfe3007aa13cf5d9b552fa60d8ecc41d3d273b19f4e41788276d9292aacdf38d764fbeb680eb5434a4b7fe8b0656903cc87880c97143a17102a6055d82ecb6986e0d156557595563dd0d570d7a4d474bb7a5bb6829be639ad1dc19d96f6ebbdb98bf5befd1e34b8b57a3b432d55a83751ac6d044c7b9b9f", @ANYRES64=0x0, @ANYRESOCT, @ANYPTR, @ANYRESDEC, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES64, @ANYRESDEC], @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES32, @ANYPTR, @ANYRES64=0x0, @ANYBLOB="0ff77bc067e692aef007f36a9e548ac7593865db0e0321093dddc3de5ba4027ada3acb7d1f19c9e132fd3dd8ab6fc21e73fb5ef04dfa445d23f0443502bfa63fbca5e374a023995e505493b7465fc6b5415d195e7917c8cdccfb9feaeeff7a9ad5f4eea7084e801ee57985f61df596f682e0032f6f37b3"], @ANYPTR64]]], 0xb) [ 228.391155][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:43:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x11}}], 0x10}}], 0x2, 0x8000) [ 228.432594][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.451561][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.465347][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.504411][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.516679][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.535915][ T9643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.563716][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.586573][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.614636][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.659554][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.718208][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.742968][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.768118][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.798451][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.820308][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.847115][ T9643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.878389][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.888353][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.910663][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.933265][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.970822][ T9648] device veth0_macvtap entered promiscuous mode [ 228.986959][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.004208][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.018068][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.043323][ T9648] device veth1_macvtap entered promiscuous mode [ 229.094781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.104143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.150060][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.157872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.172386][ T9646] device veth0_vlan entered promiscuous mode [ 229.181018][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 229.192212][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.202569][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 229.213534][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.223998][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 229.234491][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.246802][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 229.257695][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.270374][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.362056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.372402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.385400][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 229.399067][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.411019][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 229.422904][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.433196][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 229.443987][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.454051][ T9648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 229.470759][ T9648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.484221][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.496782][ T9646] device veth1_vlan entered promiscuous mode [ 229.510334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.523411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.532737][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:43:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) pidfd_open(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x20000, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=']) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 229.686248][ T9646] device veth0_macvtap entered promiscuous mode [ 229.844252][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.853235][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.862163][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.874971][ T9646] device veth1_macvtap entered promiscuous mode [ 229.909710][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.918040][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.957752][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.007198][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.034830][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.050480][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.066962][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.078064][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.092207][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.102780][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.113792][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.125393][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.136987][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.151114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.160795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.173390][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.185525][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.197023][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.209585][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.220075][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.230575][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.241100][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.252059][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.262101][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.272924][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.280617][ T0] NOHZ: local_softirq_pending 08 [ 230.285616][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.300471][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.310480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:43:26 executing program 0: eventfd(0x7fffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001835c9001c0000000c0000000c0000000200fef60000020000007117708484204b69f72810bb0a5224f2e1fc6e391dd6d4685b293bc3600334cc7b44eb3bc5808c3d01ecef6d4a5f9590e86a0e1dd3f2ff5ed48276694f62a1081e4fe9718f10dec2ab904d0aa825f4ef"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={r4, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x22}, 0x9}}}, &(0x7f0000000240)=0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r1}, 0x74) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc)) removexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@known='system.posix_acl_default\x00') r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r7, 0x5414, &(0x7f0000000080)=0x3) fallocate(r7, 0x20, 0x2, 0x3) 11:43:26 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write(r1, &(0x7f0000001400)="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", 0xe00) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/4098, 0x1002}], 0x1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000140)={0x0, 0x6, 0x1fb19805, &(0x7f0000000100)=0x8}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000) sendfile(r1, r2, 0x0, 0x14000) 11:43:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendto$packet(r2, &(0x7f00000003c0)="3ad4c35ef31ab8834d4bedd2ba8beafacf4071fdb8dae4bf525526dbd8ebdd81910390269269fde0bdacb236715eaca9bab1e6305638e6290ddda238fa12ddd38bb7c33b4f2b13c83ed83a11dfa33ab7a108a901eed0a33437122fc597eedd574b57dbe7", 0x64, 0x4c8c0, &(0x7f0000000480)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000100095eb0c3741440000e8ff00000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) mq_timedreceive(r5, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)={0x77359400}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8943, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000180)=0xc) 11:43:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xf}]}, 0x24}}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendto(r6, &(0x7f0000000200)="3d58e1886985aaf3fb64bb4f2a2f990fa37231a08ed7d04854cb9c13d67e48e3b96a2e080623a457f3b79fabaab90023de3cc589d0b387e27d0d6ba2d3c09fb4c0dc9be1a9506b98c20ab0fe62d4e40430386e8c77839b88b0e6256ba7b30eaa67f4630f9695b8841515bb98585ca2a6fda8ba6fa24e7c4d0a6b7ea61627c3bb24dfe2f8c193e5246a1b71b8e1f881393267d32d12db4a854481eebb47cef86e70cdf340777f5a2539f736eb8f3e6dda09db6340c1ba432996bc0e8323beea", 0xbf, 0x80, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000906c5c51ea905c4581d17cddcc231869b1c37adc086657f00c", @ANYRES16=r5, @ANYBLOB="00082abd7000ffdbdf250400000005002e000000000008003100ff07000008003a00060000000500300000000000"], 0x34}}, 0x24008081) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f02000600000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b000095aaa5fe34b5112a3a3184b147c4e8e936d7e99a80364097dd0bb49a31e38f23add12d22ae7cd7c9d707b60a4fa58f43ad2f6b2dc1220da92e6622273c9515b877fe119cdca816d80d38118cc8d5e7be68dea9293bbd6ad8ffd1c97361b0c41d9fe761bf81ad8d2a59081b97bbdb3f9849d5b3b61085a939a211c6b323f2e98a360b04b07603776433f5a4b0e52f4543a218"], 0x30}, 0x1, 0xfffffff0}, 0x0) 11:43:26 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 11:43:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xe, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0xffffffffffffff52) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) [ 230.755371][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 230.755383][ T27] audit: type=1800 audit(1585827806.816:31): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16553 res=0 [ 230.786571][ T9752] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.819765][ T27] audit: type=1804 audit(1585827806.826:32): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir884936379/syzkaller.zaivH5/1/file0" dev="sda1" ino=16553 res=1 11:43:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:43:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x42541, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x2}, {}, {0x0, 0xfd}, @quote}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x3f, 0x5, r1, 0x0, &(0x7f00000000c0)={0x98090e, 0x6, [], @value64=0x2}}) 11:43:27 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='errors9qemount-ro,show_sys_files=yes,fmask=01777777777777777774001,case_sensitive=no,disable_sparse=no,disable_sparse=no,utf8']) setxattr$security_capability(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x10000}, {0x8, 0x6}]}, 0x14, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x82000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) creat(&(0x7f0000000100)='./file0\x00', 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xd13c}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x7}, 0x8) 11:43:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 231.374587][ T9789] ntfs: (device loop5): parse_options(): Unrecognized mount option errors9qemount-ro. [ 231.384366][ C0] [ 231.384372][ C0] ===================================== [ 231.384375][ C0] WARNING: bad unlock balance detected! [ 231.384383][ C0] 5.6.0-rc3-next-20200228-syzkaller #0 Not tainted [ 231.384386][ C0] ------------------------------------- [ 231.384393][ C0] syz-executor.5/9789 is trying to release lock (rcu_callback) at: [ 231.384420][ C0] [] rcu_core+0x592/0x1370 [ 231.384423][ C0] but there are no more locks to release! [ 231.384426][ C0] [ 231.384426][ C0] other info that might help us debug this: [ 231.384432][ C0] 1 lock held by syz-executor.5/9789: [ 231.384435][ C0] #0: ffff88804d5dc0d8 (&type->s_umount_key#48/1){+.+.}, at: alloc_super+0x152/0x910 [ 231.384461][ C0] [ 231.384461][ C0] stack backtrace: [ 231.384472][ C0] CPU: 0 PID: 9789 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 231.384477][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.384481][ C0] Call Trace: [ 231.384487][ C0] [ 231.384502][ C0] dump_stack+0x188/0x20d [ 231.384515][ C0] ? rcu_core+0x592/0x1370 [ 231.384526][ C0] lock_release+0x586/0x7c0 [ 231.384538][ C0] ? lock_downgrade+0x7f0/0x7f0 [ 231.384551][ C0] ? lockdep_unregister_key+0x490/0x490 [ 231.384563][ C0] rcu_core+0x5b2/0x1370 [ 231.384576][ C0] ? __rcu_read_unlock+0x560/0x560 [ 231.384588][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 231.384602][ C0] ? clockevents_program_event+0x134/0x350 [ 231.384619][ C0] __do_softirq+0x26c/0x99d [ 231.384636][ C0] irq_exit+0x192/0x1d0 [ 231.384647][ C0] smp_apic_timer_interrupt+0x19e/0x600 [ 231.384660][ C0] apic_timer_interrupt+0xf/0x20 [ 231.384665][ C0] [ 231.384680][ C0] RIP: 0010:console_unlock+0xba8/0xf00 [ 231.384692][ C0] Code: 89 48 c1 e8 03 42 80 3c 38 00 0f 85 36 03 00 00 48 83 3d 52 d6 37 08 00 0f 84 8e 01 00 00 e8 8f a3 16 00 48 8b 7c 24 28 57 9d <0f> 1f 44 00 00 eb 88 e8 7c a3 16 00 c7 05 72 1c 04 0b 00 00 00 00 [ 231.384697][ C0] RSP: 0018:ffffc90001837880 EFLAGS: 00000212 ORIG_RAX: ffffffffffffff13 [ 231.384707][ C0] RAX: 0000000000040000 RBX: 0000000000000200 RCX: ffffc9001495a000 [ 231.384713][ C0] RDX: 0000000000015ed6 RSI: ffffffff815bf1f1 RDI: 0000000000000212 [ 231.384720][ C0] RBP: 0000000000000000 R08: ffff8880a31d0200 R09: fffffbfff1334569 [ 231.384726][ C0] R10: fffffbfff1334568 R11: 0000000000000001 R12: ffffffff84a5da50 [ 231.384732][ C0] R13: ffffffff8a15c930 R14: 000000000000006b R15: dffffc0000000000 [ 231.384747][ C0] ? netconsole_netdev_event+0x2a0/0x2a0 [ 231.384760][ C0] ? console_unlock+0xba1/0xf00 [ 231.384778][ C0] vprintk_emit+0x2a7/0x710 [ 231.384792][ C0] vprintk_func+0x79/0x17e [ 231.384803][ C0] printk+0xba/0xed [ 231.384816][ C0] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 231.384827][ C0] ? trace_hardirqs_on+0x55/0x220 [ 231.384839][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 231.384850][ C0] ? ___ratelimit+0x59/0x573 [ 231.384865][ C0] __ntfs_error.cold+0x91/0xc7 [ 231.384876][ C0] ? __ntfs_warning+0x160/0x160 [ 231.384885][ C0] ? __lock_acquire+0x18c3/0x5270 [ 231.384899][ C0] ? pointer+0x10b/0x680 [ 231.384911][ C0] ? file_dentry_name+0x120/0x120 [ 231.384925][ C0] parse_options+0x1949/0x1c60 [ 231.384944][ C0] ? kasan_unpoison_shadow+0x30/0x40 [ 231.384955][ C0] ? ntfs_put_super+0x1710/0x1710 [ 231.384968][ C0] ? kmem_cache_alloc_trace+0x340/0x7d0 [ 231.384982][ C0] ? __raw_spin_lock_init+0x28/0x100 [ 231.385079][ C0] ntfs_fill_super+0x1cb/0x3080 [ 231.385098][ C0] ? set_blocksize+0x24f/0x2c0 [ 231.385112][ C0] mount_bdev+0x305/0x3c0 [ 231.385123][ C0] ? load_system_files+0x6f50/0x6f50 [ 231.385135][ C0] ? ntfs_rl_punch_nolock+0x1da0/0x1da0 [ 231.385148][ C0] legacy_get_tree+0x105/0x220 [ 231.385159][ C0] ? ns_capable_common+0xe2/0x100 [ 231.385171][ C0] vfs_get_tree+0x89/0x2f0 [ 231.385183][ C0] do_mount+0x1306/0x1a60 [ 231.385198][ C0] ? copy_mount_string+0x40/0x40 [ 231.385211][ C0] ? _copy_from_user+0x123/0x190 [ 231.385225][ C0] __x64_sys_mount+0x18f/0x230 [ 231.385241][ C0] do_syscall_64+0xf6/0x790 [ 231.385254][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.385264][ C0] RIP: 0033:0x45f29a [ 231.385276][ C0] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 11:43:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @rand_addr=0xfff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001f70000e28c5339465718010528a08f003554f442764e4240080000009d7467b30b7ee982eab323870a052d610f42d81b7579d2fb5e0000e6ff7ef6878de822e709b23b13cb2d7dffff0000000000da448529864fb65ba4e45bca59751e5b1415238c3b9a062bf1dd1cd12b82f256668bbf8e50bce17a13f19cd8c5ecd4a24b4f87992ac92b7ae026e12160a9a8f3c9fbc977521352c6709a65d9fc090146945e23e0e03dec41119e5983fc8700536616d273c10e4ea826b391cb7ae01a03b81018e06a3289acf5ef96be06ca7f62310abf4cf200519b995cc149dbe516108cca9864f15e839a7712de768e29d29e573fdd34cea7b913a357fc61d4fc9ec472da35ba51c2f175026a709e26f5fda6c2931873bb51708643957dd3d5c343e2b29b6a52d50f7767f56b7a3504421712b075cc7855685768c3827252e12aa3d1a0dae1a2a4de3ecb52a8337a8aa4777129cedeb28a5ffc647103a0d6746a91cf7a5f660913d0f2064e47516eebc8069095a878bed776b1f53b1050905eea1c13cfb0"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8001}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1e}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xa0}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x1e}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 11:43:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) [ 231.385281][ C0] RSP: 002b:00007f820f631a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 231.385293][ C0] RAX: ffffffffffffffda RBX: 00007f820f6326d4 RCX: 000000000045f29a [ 231.385299][ C0] RDX: 00007f820f631ae0 RSI: 00000000200000c0 RDI: 00007f820f631b00 [ 231.385305][ C0] RBP: 000000000076bf00 R08: 00007f820f631b40 R09: 00007f820f631ae0 [ 231.385311][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 231.385317][ C0] R13: 0000000000000be7 R14: 00000000004ce08e R15: 000000000076bf0c 11:43:28 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) sendfile(r2, r1, 0x0, 0x3) [ 231.453603][ T9752] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.469609][ T9789] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 231.808789][ T27] audit: type=1804 audit(1585827807.826:33): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir884936379/syzkaller.zaivH5/1/file0" dev="sda1" ino=16553 res=1 [ 231.944113][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.978759][ T9816] tipc: Invalid UDP bearer configuration [ 231.978790][ T9816] tipc: Enabling of bearer rejected, failed to enable media 11:43:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 232.063927][ T9818] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 11:43:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='errors9qemount-ro,show_sys_files=yes,fmask=01777777777777777774001,case_sensitive=no,disable_sparse=no,disable_sparse=no,utf8']) setxattr$security_capability(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x10000}, {0x8, 0x6}]}, 0x14, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x82000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) creat(&(0x7f0000000100)='./file0\x00', 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xd13c}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x7}, 0x8) [ 232.181374][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.203273][ T9816] tipc: Invalid UDP bearer configuration [ 232.203305][ T9816] tipc: Enabling of bearer rejected, failed to enable media 11:43:28 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='errors9qemount-ro,show_sys_files=yes,fmask=01777777777777777774001,case_sensitive=no,disable_sparse=no,disable_sparse=no,utf8']) setxattr$security_capability(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x10000}, {0x8, 0x6}]}, 0x14, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x82000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) creat(&(0x7f0000000100)='./file0\x00', 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xd13c}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x7}, 0x8) [ 232.247327][ T9837] ntfs: (device loop5): parse_options(): Unrecognized mount option errors9qemount-ro. 11:43:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) [ 232.278924][ T9837] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 11:43:28 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) sendfile(r2, r1, 0x0, 0x3) [ 232.435824][ T9848] ntfs: (device loop1): parse_options(): Unrecognized mount option errors9qemount-ro. [ 232.490820][ T9848] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.551782][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 11:43:28 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) sendfile(r2, r1, 0x0, 0x3) 11:43:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='errors9qemount-ro,show_sys_files=yes,fmask=01777777777777777774001,case_sensitive=no,disable_sparse=no,disable_sparse=no,utf8']) setxattr$security_capability(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x10000}, {0x8, 0x6}]}, 0x14, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x82000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) creat(&(0x7f0000000100)='./file0\x00', 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xd13c}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x7}, 0x8) [ 232.661145][ T9859] tipc: Invalid UDP bearer configuration [ 232.661179][ T9859] tipc: Enabling of bearer rejected, failed to enable media 11:43:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) [ 232.771995][ T9869] ntfs: (device loop5): parse_options(): Unrecognized mount option errors9qemount-ro. [ 232.794834][ T9818] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 11:43:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 233.054804][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.064625][ T9875] tipc: Invalid UDP bearer configuration [ 233.064642][ T9875] tipc: Enabling of bearer rejected, failed to enable media 11:43:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @rand_addr=0xfff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8001}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1e}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xa0}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x1e}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 11:43:29 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) sendfile(r2, r1, 0x0, 0x3) 11:43:29 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) sendfile(r2, r1, 0x0, 0x3) 11:43:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:29 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='errors9qemount-ro,show_sys_files=yes,fmask=01777777777777777774001,case_sensitive=no,disable_sparse=no,disable_sparse=no,utf8']) setxattr$security_capability(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x10000}, {0x8, 0x6}]}, 0x14, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x82000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) creat(&(0x7f0000000100)='./file0\x00', 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xd13c}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x7}, 0x8) 11:43:29 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 233.328866][ T9903] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.352175][ T9904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.367366][ T9904] tipc: Invalid UDP bearer configuration [ 233.367447][ T9904] tipc: Enabling of bearer rejected, failed to enable media 11:43:29 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) sendfile(r2, r1, 0x0, 0x3) 11:43:29 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 11:43:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:29 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendfile(r2, r1, 0x0, 0x3) 11:43:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 11:43:29 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) sendfile(r2, r1, 0x0, 0x3) [ 233.784474][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.844203][ T9924] tipc: Invalid UDP bearer configuration [ 233.844234][ T9924] tipc: Enabling of bearer rejected, failed to enable media 11:43:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:30 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 11:43:30 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) sendfile(r2, r1, 0x0, 0x3) 11:43:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:30 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="19d7d00f82f01dbbf561d4cd81d559d58e178ae756bc68d21c082742fa6432955e7192379ce73b4396fd212024701b57e2d14e5aa165daa00d740e31661bf4a1657f5290806a93311fab40725c500c2e3c82659afbf72111456fe18afc392df864bedf37b71babba73897507d44accc00faba68f4b081a099f198823b751ec18f9b76e5dbcc011c8cb78383cf7140429fcfacbba78bd4d69ee47fabba56a09ac0499f3b1c82f4bfcbdd1f50dc88aad82594e0df292b854877a079f3e20c8a17df81ee2d371d9754f19518810ae88d910c714d9a347767ec12a493d2e77a2922b99", 0xe1}, {&(0x7f0000000140)="33ca96b76d41bd2be060c14ab256b3ffbc27e5c39d0ae37164ace1df986b0d2c82b917f015da2dbfaaa79642091336eab93792e2bc1aab3b9be198f7cf500c8215117bb1e4da396c6a3b73eefc9668f7c0e70eaa5e557295f86cb016fed41f209c7739b4d5669c", 0x67}, {&(0x7f00000001c0)="b7de8319763204ab66eaa9ba950deb90160dff07ef89f8c3a5148b2ad4276684bdd57f38cb7eaa8578ee9bb1a4c802abde1568261bbea6cf70b5c04215", 0x3d}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/448], 0x1c0, 0x44040}], 0x1, 0x90) 11:43:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 234.193934][ T9953] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.224243][ T9953] tipc: Invalid UDP bearer configuration [ 234.224292][ T9953] tipc: Enabling of bearer rejected, failed to enable media 11:43:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:30 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x3) 11:43:30 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 11:43:30 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 234.406710][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.448769][ T9955] tipc: Invalid UDP bearer configuration [ 234.448797][ T9955] tipc: Enabling of bearer rejected, failed to enable media 11:43:30 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x3) 11:43:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 234.542370][ T9971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.595547][ T9971] tipc: Invalid UDP bearer configuration [ 234.595578][ T9971] tipc: Enabling of bearer rejected, failed to enable media 11:43:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:30 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) 11:43:30 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x3) 11:43:31 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:31 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x3) 11:43:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 234.965951][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 11:43:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 235.017696][ T9996] tipc: Invalid UDP bearer configuration [ 235.017728][ T9996] tipc: Enabling of bearer rejected, failed to enable media [ 235.053207][T10000] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 11:43:31 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:31 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3) [ 235.108919][T10000] tipc: Invalid UDP bearer configuration [ 235.108999][T10000] tipc: Enabling of bearer rejected, failed to enable media 11:43:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:31 executing program 1: inotify_init() open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:31 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3) 11:43:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) pipe(0x0) 11:43:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:31 executing program 1: inotify_init() open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 11:43:31 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0xfe) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3) [ 235.617776][T10036] tipc: Invalid UDP bearer configuration [ 235.617802][T10036] tipc: Enabling of bearer rejected, failed to enable media 11:43:31 executing program 1: inotify_init() open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:31 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28dc5291}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1380}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x10) 11:43:31 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x3) 11:43:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) 11:43:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:32 executing program 1: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:32 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 235.974959][T10078] tipc: Invalid UDP bearer configuration [ 235.974986][T10078] tipc: Enabling of bearer rejected, failed to enable media 11:43:32 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x3) 11:43:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:32 executing program 1: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:32 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) 11:43:32 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x3) 11:43:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) 11:43:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:32 executing program 1: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) [ 236.402151][T10111] tipc: Invalid UDP bearer configuration [ 236.402177][T10111] tipc: Enabling of bearer rejected, failed to enable media 11:43:32 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x0, 0x2}}, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 11:43:32 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x3) 11:43:32 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) 11:43:32 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:32 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x3) 11:43:32 executing program 1: inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) 11:43:32 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:32 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) 11:43:32 executing program 1: inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:33 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x3) 11:43:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 11:43:33 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) 11:43:33 executing program 1: inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:33 executing program 0: inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x3) 11:43:33 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3100000000380004002000011e0a000000000000007a0d0000000000000001000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) 11:43:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}], 0x20) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 11:43:33 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xfe) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 11:43:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x2000000000000021, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffd79}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(0x0) connect$