[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.277176][ T27] audit: type=1800 audit(1576492625.235:25): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.305679][ T27] audit: type=1800 audit(1576492625.235:26): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.360040][ T27] audit: type=1800 audit(1576492625.235:27): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. 2019/12/16 10:37:14 fuzzer started 2019/12/16 10:37:16 dialing manager at 10.128.0.26:37271 2019/12/16 10:37:17 syscalls: 2701 2019/12/16 10:37:17 code coverage: enabled 2019/12/16 10:37:17 comparison tracing: enabled 2019/12/16 10:37:17 extra coverage: enabled 2019/12/16 10:37:17 setuid sandbox: enabled 2019/12/16 10:37:17 namespace sandbox: enabled 2019/12/16 10:37:17 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/16 10:37:17 fault injection: enabled 2019/12/16 10:37:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/16 10:37:17 net packet injection: enabled 2019/12/16 10:37:17 net device setup: enabled 2019/12/16 10:37:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/16 10:37:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:40:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) recvmmsg(r1, &(0x7f0000007280)=[{{&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)=""/103, 0x67}], 0x1, &(0x7f00000008c0)=""/51, 0x33}, 0x6d}, {{&(0x7f0000000900)=@l2, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/176, 0xb0}, {&(0x7f0000000a40)=""/50, 0x32}], 0x2}, 0x3}, {{&(0x7f0000000bc0)=@un=@abs, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/110, 0x6e}, {&(0x7f0000000cc0)=""/46, 0x2e}], 0x2, &(0x7f0000000d40)=""/152, 0x98}, 0x8}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000001040)=""/28, 0x1c}, {&(0x7f0000001080)=""/186, 0xba}, {&(0x7f0000001140)=""/77, 0x4d}, {&(0x7f00000011c0)=""/240, 0xf0}], 0x6, &(0x7f0000001340)=""/14, 0xe}, 0x1}, {{&(0x7f0000001380)=@hci, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001400)=""/251, 0xfb}, {&(0x7f0000001500)=""/236, 0xec}, {&(0x7f0000001600)=""/246, 0xf6}, {&(0x7f0000001700)=""/91, 0x5b}, {&(0x7f0000001780)=""/129, 0x81}, {&(0x7f0000001840)=""/188, 0xbc}, {&(0x7f0000001900)=""/145, 0x91}, {&(0x7f00000049c0)=""/28, 0x1c}, {&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000001b00)=""/230, 0xe6}], 0xa}, 0x7}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001cc0)=""/231, 0xe7}, {0x0}, {&(0x7f0000001e40)=""/235, 0xeb}, {&(0x7f0000001f40)=""/30, 0x1e}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/118, 0x76}], 0x6, &(0x7f0000003080)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000004080)=@x25={0x9, @remote}, 0x80, &(0x7f0000004300)=[{&(0x7f0000007580)=""/83, 0x53}, {&(0x7f0000004180)=""/71, 0x47}, {&(0x7f0000004200)=""/124, 0x7c}, {&(0x7f0000004280)=""/61, 0x3d}, {&(0x7f00000042c0)=""/55, 0x37}], 0x5, &(0x7f0000007500)=""/77, 0x4d}, 0x197}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004400)=""/48, 0x30}, {&(0x7f0000004440)=""/202, 0xca}, {&(0x7f0000004540)=""/10, 0xa}, {&(0x7f0000004640)=""/141, 0x8d}, {&(0x7f0000004700)=""/250, 0xfa}, {0x0}, {&(0x7f0000004840)=""/227, 0xe3}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000004a00)=""/105, 0x69}, {&(0x7f0000004a80)=""/49, 0x31}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/168, 0xa8}, {&(0x7f0000005bc0)=""/225, 0xe1}, {0x0}], 0x6, &(0x7f0000005e40)=""/191, 0xbf}, 0x5}, {{&(0x7f0000005f00)=@rc, 0x80, &(0x7f0000007180)=[{&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/229, 0xe5}, {&(0x7f0000007080)=""/195, 0xc3}], 0x3}, 0x40}], 0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) bind$vsock_stream(r3, &(0x7f00000007c0)={0x28, 0x0, 0x0, @reserved}, 0x10) sendmmsg$unix(r4, &(0x7f0000004080), 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000001c0)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/185, 0xb9}], 0x3, &(0x7f0000000700)=""/139, 0x8b}, 0x1f}], 0x1, 0x40000040, &(0x7f0000000380)={0x77359400}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x11}) r8 = syz_open_pts(r7, 0x4000000000000002) r9 = dup3(r8, r6, 0x0) fcntl$setstatus(r9, 0x4, 0x48c00) ioctl$PIO_FONTRESET(r9, 0x4b6d, 0x0) socket$packet(0x11, 0x2, 0x300) 10:40:24 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2, {0x0, 0x0, 0x100000000}}, 0x90) syzkaller login: [ 260.553215][ T9098] IPVS: ftp: loaded support on port[0] = 21 10:40:24 executing program 2: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000340)='./file0\x00', 0x2) [ 260.675116][ T9100] IPVS: ftp: loaded support on port[0] = 21 [ 260.782599][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 260.909433][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.917543][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.926207][ T9098] device bridge_slave_0 entered promiscuous mode [ 260.945066][ T9103] IPVS: ftp: loaded support on port[0] = 21 [ 260.955940][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.963039][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.973286][ T9098] device bridge_slave_1 entered promiscuous mode 10:40:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20007, [{0xa}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000300)=""/250, 0x3a, 0xfa, 0x8}, 0x20) [ 261.093368][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.111821][ T9100] chnl_net:caif_netlink_parms(): no params data found [ 261.124793][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.240777][ T9098] team0: Port device team_slave_0 added [ 261.287497][ T9098] team0: Port device team_slave_1 added [ 261.293372][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.303743][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.313021][ T9100] device bridge_slave_0 entered promiscuous mode 10:40:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x84) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x2, r1}, 0x10) [ 261.350315][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.357978][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.366418][ T9100] device bridge_slave_1 entered promiscuous mode [ 261.439013][ T9098] device hsr_slave_0 entered promiscuous mode [ 261.476017][ T9098] device hsr_slave_1 entered promiscuous mode [ 261.534023][ T9100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.553183][ T9103] chnl_net:caif_netlink_parms(): no params data found [ 261.591950][ T9109] IPVS: ftp: loaded support on port[0] = 21 [ 261.602798][ T9107] IPVS: ftp: loaded support on port[0] = 21 [ 261.628406][ T9100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:40:25 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) chdir(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) dup2(r4, r3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/de~/nvram\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x6, 0x4) r5 = creat(0x0, 0x0) close(r5) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r6, &(0x7f0000000100)='threaded\x00', 0xff6e) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='sessionid\x00') [ 261.724561][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.733022][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.741516][ T9103] device bridge_slave_0 entered promiscuous mode [ 261.801729][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.810745][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.819160][ T9103] device bridge_slave_1 entered promiscuous mode [ 261.834202][ T9100] team0: Port device team_slave_0 added [ 261.849251][ T9098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.894662][ T9098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.961274][ T9100] team0: Port device team_slave_1 added [ 261.984491][ T9103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.994939][ T9098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.005378][ T9111] IPVS: ftp: loaded support on port[0] = 21 [ 262.060239][ T9098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.105117][ T9103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.179357][ T9100] device hsr_slave_0 entered promiscuous mode [ 262.226059][ T9100] device hsr_slave_1 entered promiscuous mode [ 262.265912][ T9100] debugfs: Directory 'hsr0' with parent '/' already present! [ 262.310633][ T9103] team0: Port device team_slave_0 added [ 262.319047][ T9103] team0: Port device team_slave_1 added [ 262.411334][ T9103] device hsr_slave_0 entered promiscuous mode [ 262.466188][ T9103] device hsr_slave_1 entered promiscuous mode [ 262.505814][ T9103] debugfs: Directory 'hsr0' with parent '/' already present! [ 262.570319][ T9100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.639684][ T9100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.700003][ T9100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.773788][ T9107] chnl_net:caif_netlink_parms(): no params data found [ 262.783628][ T9109] chnl_net:caif_netlink_parms(): no params data found [ 262.800562][ T9100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.947407][ T9103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.001867][ T9103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.068886][ T9103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.129092][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.138400][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.147522][ T9107] device bridge_slave_0 entered promiscuous mode [ 263.158608][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.165852][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.174224][ T9107] device bridge_slave_1 entered promiscuous mode [ 263.192981][ T9109] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.200601][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.208510][ T9109] device bridge_slave_0 entered promiscuous mode [ 263.218069][ T9103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.261701][ T9109] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.268966][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.278283][ T9109] device bridge_slave_1 entered promiscuous mode [ 263.353704][ T9109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.368870][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.388122][ T9109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.399496][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.428796][ T9107] team0: Port device team_slave_0 added [ 263.436865][ T9111] chnl_net:caif_netlink_parms(): no params data found [ 263.464284][ T9109] team0: Port device team_slave_0 added [ 263.476001][ T9107] team0: Port device team_slave_1 added [ 263.498026][ T9109] team0: Port device team_slave_1 added [ 263.558731][ T9107] device hsr_slave_0 entered promiscuous mode [ 263.606260][ T9107] device hsr_slave_1 entered promiscuous mode [ 263.675845][ T9107] debugfs: Directory 'hsr0' with parent '/' already present! [ 263.722386][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.731448][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.740084][ T9111] device bridge_slave_0 entered promiscuous mode [ 263.829546][ T9109] device hsr_slave_0 entered promiscuous mode [ 263.866227][ T9109] device hsr_slave_1 entered promiscuous mode [ 263.925734][ T9109] debugfs: Directory 'hsr0' with parent '/' already present! [ 263.944978][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.952220][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.960463][ T9111] device bridge_slave_1 entered promiscuous mode [ 264.004850][ T9111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.026029][ T9111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.070708][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.079164][ T9107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.152029][ T9107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.209817][ T9100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.219544][ T9111] team0: Port device team_slave_0 added [ 264.238015][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.247419][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.258763][ T9107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.298001][ T9109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.340847][ T9109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.398383][ T9111] team0: Port device team_slave_1 added [ 264.404590][ T9109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.469062][ T9109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.529072][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.540572][ T9107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.649193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.658815][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.671141][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.678693][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.687932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.697401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.706334][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.713651][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.721395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.729761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.739717][ T9103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.799438][ T9111] device hsr_slave_0 entered promiscuous mode [ 264.856203][ T9111] device hsr_slave_1 entered promiscuous mode [ 264.895746][ T9111] debugfs: Directory 'hsr0' with parent '/' already present! [ 264.914536][ T9100] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.921878][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.931290][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.987764][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.999874][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.009709][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.023897][ T9103] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.043475][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.051825][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.061255][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.069561][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.078615][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.105011][ T9111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.158332][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.167252][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.176299][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.183367][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.192303][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.200581][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.209067][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.235502][ T9111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.277782][ T9111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.329568][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.339843][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.348898][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.356152][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.364127][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.373120][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.381702][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.388800][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.397593][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.406604][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.414942][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.422077][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.447018][ T9111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.495801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.503761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.512606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.540092][ T9098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.554597][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.564139][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.572996][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.581446][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.591196][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.600278][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.608978][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.618558][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.627380][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.661149][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.679120][ T9100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.690502][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.699069][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.707177][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.716139][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.724642][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.733138][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.741679][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.750760][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.759466][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.794486][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.802915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.813442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.823757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.832385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.840734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.849519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.861796][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.886011][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.894449][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.904999][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.915989][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.942357][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.961213][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.970317][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.979402][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.987150][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.996118][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.004448][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.011573][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.020148][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.028240][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.036751][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.053178][ T9100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.069774][ T9107] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.097075][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.107977][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.123198][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.130365][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.152396][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.170580][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.178415][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.187968][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.197880][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.204982][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.227863][ T9103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.240712][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.251048][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.272410][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.296230][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.303448][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.351790][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.364001][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.426513][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.444705][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:40:30 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[]}}, 0x4000) sendmmsg(r0, &(0x7f0000000180), 0x40000000000002b, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/udplite\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x10}) [ 266.479836][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.516634][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.555896][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.566435][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.577716][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.585995][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.593854][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.603396][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.634942][ T9109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 10:40:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0x2, 0x4a21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000700)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[r2]}, 0x1) [ 266.686602][ T9109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 10:40:30 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x400, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4}}, 0x32) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={0x0, 0x0, 0x10}, 0x10) ptrace(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x0) [ 266.735861][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.760923][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.783797][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.800034][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.816653][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 10:40:30 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000000380), 0x313) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 266.846987][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.862881][ C1] hrtimer: interrupt took 39558 ns [ 266.884143][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.892882][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.952229][ T9107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.952893][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.994743][ T9111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.995314][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.996324][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.996845][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.072538][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.072701][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.094966][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.095190][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.109532][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.113675][ T9109] 8021q: adding VLAN 0 to HW filter on device batadv0 10:40:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000080)={0x2}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x4}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0xd909}, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x80000) accept(r5, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$write2(0x11, &(0x7f0000000340)={0xc97, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r9}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @ib={0x1b, 0x3ff, 0x401, {"c63abd8370d34f4919b9d55aba89863f"}, 0x0, 0x2c, 0x4000000000000000}}}, 0x90) [ 267.151548][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.152238][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.187294][ T9111] 8021q: adding VLAN 0 to HW filter on device team0 10:40:31 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_MULTICAST_ROUTER={0x8, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7c, 0x10d000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f00000001c0)=0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) userfaultfd(0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r5) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7ff}, 0x0, &(0x7f0000000140)={0x1ff, 0x1}, &(0x7f0000000200), 0x0) 10:40:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000080)={0x2, 0xe62f, [0x3b8, 0x6, 0x80, 0x7, 0x8], 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) [ 267.317469][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.317941][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.318215][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.318250][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.318554][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.318905][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.319172][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.319196][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.320245][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.327847][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.335183][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.342069][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.342905][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 10:40:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r1, 0x8, 0x42) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x8}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/66, 0x42}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x37) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) [ 267.343593][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.351880][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.352697][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.370159][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.370734][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.397600][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.398181][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.413037][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.451850][ T9157] BPF: type_id=10 offset=0 size=0 [ 267.451860][ T9157] BPF: [ 267.451866][ T9157] BPF:Invalid size [ 267.451872][ T9157] BPF: [ 267.451872][ T9157] [ 267.460233][ T9157] BPF: type_id=10 offset=0 size=0 [ 267.460242][ T9157] BPF: [ 267.460249][ T9157] BPF:Invalid size [ 267.460254][ T9157] BPF: [ 267.460254][ T9157] [ 267.462213][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.462315][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.503679][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.623086][ T9167] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 10:40:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7086270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6772706a71756f74613d2e2c00e495441df9d38a1525ed31150de4b87eeaf35f1ea61d64d85b5ba4c7e2d1111aaf894546fd1545391a74217c317dc614b8828b838568f1102a7e42444600088c96eb2728fd92eadde69b9cfa44c588dee4272c9b004b8dae2cfed0c1ffa659c7cf1378ff5c894b0152bba557ad387085921c0f7bc8a59224d41bd17c7f8a8801edf457fde353abd5e39440f950fe5f3f4fa42ad0c5cdcbad40176b691bbd00530b0e0da3aafa2e999b1c"]) 10:40:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121081, 0x9d) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x240) [ 268.072037][ T9185] EXT4-fs (loop2): journaled quota format not specified 10:40:32 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x410000, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x9, 0x8, 0x1}) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}]}, 0x44, 0x0) mount$overlay(0x400fe0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 268.490638][ T9215] overlayfs: conflicting lowerdir path [ 268.515214][ T9217] overlayfs: workdir and upperdir must reside under the same mount 10:40:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xfffffffffffffdec, 0x0, 0x0, 0x0}, 0xfffffffffffffe1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x181200, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000080)=0x6) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0x2) dup3(r2, r0, 0x0) 10:40:32 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!\t'], 0x3) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10:40:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x980001, 0x0, [], @p_u32=0x0}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/163, 0xa3}], 0x3) 10:40:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40040, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xf0, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x78}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x47}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x60000090}, 0x1c32bbcafe211120) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 10:40:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 10:40:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) r4 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) [ 269.001221][ T9223] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. [ 269.023948][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.038143][ T9226] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.065424][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:40:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xff, 0x80) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x80fd, 0x1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0xa000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="4cd11b20be7983f5755d1488b28149878205565c593eec01022f32c1f2fe1bf6169bd981e9c1ac80b43e7ed4129f89429e5df15372600b460e658709977c6dd71a267691b95719e8dd74332b0f3990f96128af33b4", 0x55}], 0x1, &(0x7f0000000380)=[{0xf8, 0x1, 0x5, "350ab223929e996f3c387146f62b219205c299433fcf16ae2c30f5e3ce31d48acdfd6afea64399a606d9d7d6d66f88beb73e7d40f2c31af2625c830d4b1f07ca7c3ca46e48713306f36319f1dc3058ede1ac43b281eaf134dfdf7ecc3c14780698023f21445e1db8d4f733bab9b4ac28d485d7140f1096f2227bc6d082e2e56167befd49b84455ced23605cf780632ead19c6d18dbb9884cd49c4f2023622fde89f88636c6d02b90106247b0d22c5c431601e668dcee41494502157d9a2b419323b1babf290fc9eea46398b69b419fc3441dddfd077661acbdbd29bab30f81c4dfd36e4270"}], 0xf8}}], 0x1, 0x0) [ 269.114059][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.144644][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:40:33 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@default) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x110}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_KEEPCAPS(0x8, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @rand_addr=0x1}, @in6=@empty, 0x4e22, 0x787, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x6c, 0x0, r4}, {0x0, 0x1ff, 0x1, 0x0, 0x2, 0x5, 0x8000, 0x100000001}, {0xff, 0x3c94, 0x6, 0xbbc}, 0x1, 0x6e6bb5, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0x1cd}, 0x0, @in6=@rand_addr="189d54f717527f8c43679914f7f66305", 0x3507, 0x5, 0x1, 0xb5, 0x80000000, 0x6, 0x1}}, 0xe8) fallocate(r2, 0x8, 0x2000424, 0x1) write(r2, &(0x7f0000000340)='/', 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r2, r2, &(0x7f0000001000), 0xfec) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x247c, 0x4, 0xae7, 0x594fa3d2, 0x7}, 0x14) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) r5 = shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x4000) shmdt(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x810, r7, 0x10000000) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x185404, 0x0) [ 269.256303][ T9226] syz-executor.1 (9226) used greatest stack depth: 22856 bytes left 10:40:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)=0x50d060000) perf_event_open(&(0x7f000001d000)={0x1, 0x3da, 0x0, 0x3f, 0x80, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x2, 0x20000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) 10:40:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x1000002192c04) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="56efbba6e8aee7b4059f0000007c62ba2ba6f18a1738b744b306abdf00f9002d00000000e789310100000000000000196691cde10e015e8f72b3abd1965e78451a543c742b3363b3806dc2c1a642d4a529c0e34bf6eb61acc9c347349326efca5be61f0000009cd920af72f7192ba48332891da6bbab22917d7d08fbb2b607c52b23ee3a4152432de61bb085315bbd1bf7e8a84dc5c925317c62ecf3a3c7742669d59443a7ffa2327420289de50b0d68fd"], 0xb1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) 10:40:33 executing program 4: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000080)={0x0, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0xaaaaaaaaaaab1c3, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', 0x0, 0x0, 0xfffffffffffffe52, 0x0, 0x1000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x0, 0xe20, 0x0, 0x2}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0), 0x3f00}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000040)="2a3021f1a1508fed7950275154e6c748c29e9d5428295a1c5e1d6784", 0x2b}, {&(0x7f0000000980)="68daae2f04940a65395fcf58e22265f73d6aadab2c74f5", 0x17}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000001f40)="01ef1c85c282f82a4759cdce680548", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e40), 0x1f4}, {0x0, 0x7fffee0c}, {&(0x7f0000000f40)="b68fd6609dd93c3fe01b7d3400b63ffb3e1bc0ea7f735cb6298f84d1b442f0fa17567e0f52de7793e993c9447a57636f1384683126412f3b2119453a55db976b683841c55f2173ce350ad5a432f28c64e1cb4d21e5418d8515c443cde744840feb6ae470e65d6432bc4d3b2d0bdb0a4fb487878e29f6c6dd0a4e7fa2e9555c166135d365783334d879088a974825f7b400bb96df10f4ea8120ff4d6c8d2fae6c1bcc8391667a0a8b940e343cbb50caa40e052c5d4d8c3dd52576eb0a9baae5e27815940355b0b480a111bd353de778b1636fa0effab7f8e4945e12314dd855a5c3016b5e65ac1bf7d5158ceaef8a41", 0xef}, {&(0x7f0000001040)="3d2426181de7d92ec17a964117578b9bbb26b4927ca727491df141ad0eb96ba64b0c8f3bfb0109236ea591321e0d3c", 0x2f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000080)}}], 0x6, 0x4000000) [ 269.646060][ T9258] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 269.651219][ T9266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 269.728511][ T9271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.738629][ T9258] FAT-fs (loop1): Filesystem has been set read-only [ 269.852865][ T9258] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500) [ 269.894700][ T9257] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500) 10:40:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@netrom={'nr', 0x0}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x10001) 10:40:34 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 10:40:34 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x100) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) shutdown(r1, 0x0) 10:40:34 executing program 1: prctl$PR_GET_ENDIAN(0x13, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000180)) socket(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0xe, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x24) socket(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x2403, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x29d912f5e24f2f79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x300, 0x0, 0xfffffffffffffe3d) 10:40:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000400)) fsetxattr$system_posix_acl(r1, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x9a0efa2b65aacb27) gettid() syz_open_dev$sg(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0xffffffb9) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="0300000010000108000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00000000108900001400140076657468315f746f5f6873720000000008001b00000000009c1149da00f53964bf16ec5976e110c191568578766f941c087875ad9f46530d4e62711858ff280e2297299c4758f989c068daaa0231bb18eeec59b07d7ec89d87d79e1c725dd39a64b52fb068ed160e8a2e2ef92fe0d05c5fd2914399514825edd15edda61634f7159f52f75e"], 0x3c}}, 0x0) 10:40:34 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e27, 0x1000000, @local, 0x7}, 0xffffffffffffffee) listen(r0, 0x200001ff) r1 = socket$inet6(0xa, 0x6, 0x0) socket(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000000aff000000000000000000c628dc75005c69e1835a3022b085a27f0906b685113ed246ce9f53240fe566eabca3f68b84d5c3a164930dfcc4439b05b05426053ddc4401c58c8471b8b5a41531b7568004d1b08813cd0d3312177d0c1e59d58577a97afbca2d521abd4683b87453c1cceb33c953a3a714b62925c54718e8d669", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffffffffffff"], 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000fffffffffffff1c6a458a7329de86ae699f608f43679d77d5a30599c2f236f4d347bc0417c27a110a20581c40a31e877fc982d232e0e37e6f72a9009290a31bd437a14ecada424d1dacc76b06bd6dc6fef285d2eb59cc817f4cacbf1f3876d758b36354f566c03591bf47bb7dd8ba19ea500d95d893e7d527a8f97791a375cdea9f55394de26406cb72a29da0eb4257bdb36adf8ed9e6aaf55a1ed28adfb27d48c976084dd1d53d2afd2c01c"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r8, 0x205, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x02'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x5a60c7b5}, 0x73) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000380)=@nfc={0x27, 0x1, 0x1, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f00000002c0)="f54dd85d030fda7fdd6a7ddad2c1f045c29df7b11555df48202a5eeb8d862e1aff26fb2cee0d98750719968f", 0x2c}, {&(0x7f0000000400)="4783b8b3ac21108e3108a2de60732825d6e63746d23345ed4ead47ab9c54baa4d7e81f0f737b74e41118e6977c0f291eb3f5619667a1d07ba76b124f00ee57704bf7528d2a8c77af9fa47a572d94261f629854007ab20af3b8136397dc9e9d3912fe099915f8ffcd", 0x68}, {&(0x7f0000000480)="5a2769efb2e7da2a148c495adb2a7f4e31b7eb27a2985d52ed44fd6a8a4a3c01d0dcc09723e590e83bf616bf2644fa50ec4de1178008d344356b4576551f22c3cf473cc99f2f8d1f19932976b0e98dda7e0ea267d8d2ed808a1035f410fe2bd39c1891b67429709c58bfe4e885c6203746069da1106d42287260bafa8c9b5f6f2c0be4ef807af96bd1a3ee49f1702416d9edc9483334c587b7f0caf5f6fcd75451dc9238282afd8ef9bcac5c83", 0xad}, {&(0x7f0000000540)="c56311cf2942bd66b2288cb27cce518d3a93d3606e88f3c827a08e925c1aca2390027f9d2bab4edc19597dc0092211ce4c675effa1eac92e40a2628ef6b22b42182c0d6e69448c92dab70b467753cf18b2c2d3e8beec4133b3776e6bc8283317c649619f9f6336b8016d22e3192cebe2e8b643ea9cbab351bcc15ec7c15219b07d8a3b924d32a283673119a5a1585742565d394f877a22d032ec9eef8b95d7b75555b30958cfdcff0e", 0xa9}, {&(0x7f0000001040)="b4f57b8045dea71b99845466db0fb01b56f338fb28817c93d701061f9007e232eb94c3a392faebb8480c31b59f6edd9d3de9a34561795076e07ad7d8f25e1215eae98466e244e7ad91c3fc65502fcb4003ebdc00f9c762ebf10c05442f1b9f3fe6ae96dbd9dda3bcfc1e9096c3b63766325939cf670c55c3a53126ea793cf66dda7d45290f1d88adb72bd24a0808661635", 0x91}, {&(0x7f00000006c0)="5e1405c64725a27ddb62b2f1c0fe5409a38b5432454f7bd3650efdf895259a7bb5077d78c0a70b50a62feb537ce00ecb94d5737f5394c5cc1fa23d9d8b853f3ae3d60db335930d417b48390e6766cd71dd12b15af5e687a2fe1a3c0d5db4bcee1ef4fa73628584bce52aeb6b4b994332debf4565f033faf18b577fa3bc3443ad3831054ab3f7d742abd87a3a6692f409d7e918a07867e92715a7c70976e5e4b0f074126cc11b5166", 0xa8}, {&(0x7f0000001440)="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", 0x1000}], 0x7, &(0x7f0000000800)=[{0x60, 0x29, 0xffffffff, "f7dd8fbe742cb0dc547fb9c574e2eebea3fcaf5f404a28df503481f5af8da5f2e561b2cfd646067d6192faf4c93fbd7ae9a6b184a3fbe1903cd0874c5fa79d5ec2d9d4306e5305d009c180fb7624"}], 0x60}}, {{&(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x1, {0xa, 0x4e21, 0x0, @loopback, 0x4}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)="651a5d2d6b384fb04fd727229d6ab951be398fa7d87f19df5098a9ebf261bdc94854f14e0135ca8bfeff2e324dc9c8e57fb3d1ac1591dc0d0c687bd230e3992a2649dc", 0x43}, {&(0x7f0000000980)="5f88535de2eca7367df9aa805c78c089d8d593bb470966410c15692e7aa4d4dd2bb64775e2b1de8c89490bdd73920255739e526ee10f16ce53ce7b7491265051325a8fff17aa81f12564220dcf0b063c981cece34ad7f615b239dc98b4612a516c9b0d6790b6845fc1019529ee73d8cf9fb8091f106203755fd71a4b89e8260b34603ddd547a249501724c11f7ecbf44d77333aa0391", 0x96}, {&(0x7f0000000a40)="47c246d34f79c5d0e06ba0efe8787ff3898a01497f1f94db8d00ce3bc955eea23db7e2056d3aab8bfadf155536f9", 0x2e}, {&(0x7f0000000a80)="6ce3623e0ab948a7d553a3d4a0922304a0b408e9fe3075f3ef1d4257e6d19c589265e7b71ac82a64a7b2b6265a3cb2da03e4a6ac15adb14d80c5d6aae9bdf8fbc491599234be599be1f2cce7a8b64814a39d76c2eccd8e6c12ac93ec60d8331a53d7dfc8", 0x64}, {&(0x7f0000000b00)="b7f5ef5f28bea5acd380582323dd067f4652a06cf777a00e3a441e3b1c179ee43f2ad639ce443f7120895168ff43e0feed34dc2f95d5502e600d704e646b6d84c204cd7d1f8d9c4d69c9079af517456a39d47c4bfb21de2cf4aa69436777e48060101932d333ea09e4610ab5f39c1f85229b13fa37135ac2bbecb42c3402499c17e7e90281e26d49324705ebef31a438d76e900a0b50a24e4adb16a4df416a19de00af1f16b6f4c02cdf4113298d5e2ee7fb908f8083cfe2a8ec29f47ba3d948018e0d77c018acc28d56e6b54d83604dd0af3a9ca138279e30447a34494929eda6cac00ae36926005d1521bfc5cb836ea972", 0xf2}], 0x5, &(0x7f0000000c80)=[{0xa8, 0x197, 0xffffffff, "864d1ea17b6e4526e0fe365ef1b62321adf2878b2b87520439b5b9148caecd739cda10ca34832151d8b37726379c0dc3e104c1391ba0e5c928881bb692a97be595d7e266978f871522429724cc37e67f5bac16e558473c9a9d4a8ae3bda8b58b62ca74aca8693c8f94b8a93f0f6028c3b4c5584e2bf23016bc30353b7105e6ebf14dc6939f54a01656856fe4a97e78a087e1a46ede5c35"}, {0xc0, 0x0, 0x7fff, "79689664fecbeb76cb56bc542944abb8670c3ed62ed26d64d16291ff22f493b117a4efc0796e4174b9b4a27ef6f0400b364d8f9f66d5e25fed4d9eea03f290db6456124ae76ff4d524ccbc1ff6032d718b6d41775fc97e132b44fc16ddb5fb7566a8ba561c437fb8f99cfc46137e57ea7634e156fc40a8299a05a36d4a7ce9a5618e102dfe19e76707945285785d5ad30c8ec5ddb485970d12082a68f46b974dd6dcb917a8b6f61787c83e3c67466d"}], 0x168}}], 0x2, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x9) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r1) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) [ 270.379478][ T9287] input: syz1 as /devices/virtual/input/input5 10:40:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)=0x0) write$cgroup_pid(r0, &(0x7f0000000400)=r5, 0x12) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x40, 0x809c0) ioctl$KVM_SET_XSAVE(r11, 0x5000aea5, &(0x7f0000000580)={"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"}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 10:40:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000086286b3e2505b1a100", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c0001007665746800000000181531340002011400010000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) [ 270.646976][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:40:34 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000000000000000002100000000000000", 0x30}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 10:40:35 executing program 3: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) r1 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={[], 0x69, 0x0, 0xfffffffffffffffd}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}}}, 0x30) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, 0x0) gettid() write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_SET_NAME(0xf, 0x0) 10:40:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x10) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0xc, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 271.219419][ T9291] input: syz1 as /devices/virtual/input/input6 [ 271.338089][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state 10:40:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000000)=""/39, &(0x7f0000000040)=0x27) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8200, 0x5, 0x0, 0x27) 10:40:35 executing program 5: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x0}, 0x20) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xca340, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c) r6 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, r6, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') getitimer(0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file1/file0\x00', 0x0) r7 = syz_open_dev$sndpcmc(0x0, 0x0, 0x8000) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000080)={0x5, 0x0, 0xa4, &(0x7f0000000400)="51daf16f60a6af36f789b9427683fbb116573dadce7d6e89fc67f7ff9dfffb7d28758a3dc9f00d948a310f5d69f03b78df66aa0cb18166cdcf5b3f29d14b9057eec6bd3b2c9d2222a4758ca90f0f4be510b3c392a00bd4e598ee9a1d798fb8509fab7f29728b705a67072a5af47df7937987534503aa2b63c2a8196a3755758a8848cf79ca23ac20e0c05cfa48c9908ac8a785432c5dbe7f5ffb9b22952da6963a6a116f"}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000140)='system.posix_acl_access\x006rJ!o-\x12\xb7?t\xd7\xee\x87\x18{l\xc8J\xe8\xcf\xcf\xbb|\xb8ERtv?t\x81\xcc\x9e\x03g\xe3\xd5\"\b\xd1\xb7', &(0x7f0000000680), 0x24, 0x0) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x41) [ 271.840561][ T9314] device bridge_slave_1 left promiscuous mode [ 271.848501][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.929427][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.946121][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 271.967204][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:40:36 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x200000, 0x0) 10:40:36 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7f}, 0x24005, 0x9, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001e005f1c14fffffffffffff8070000000000000001000000080002000d000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a20acc8438be347111945dd2e8ea3b65f36418c17a235cc3932264f1255ad5713442830048d202b304821a4f4e3139ee98c8362553614c779fa93fa351490e3694a2a89151144f1891f6c94ba2eb7a0d3b7e9b8a39bde9f03ba73bd101eef4e7a1499683f4b171e5dcdaddcb8cae95d4e9d1940000", @ANYRES16=r2, @ANYBLOB="3f02000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x704, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=r4, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7ffc673bc09ec4e5", @ANYRES32=0x0, @ANYBLOB="040003000000000008000c00", @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c5462b11253db6a98f4d57a55", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="08000600", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xf, r7, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000280)={0x0}) [ 272.014817][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:40:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$rds(0xffffffffffffffff, 0x0, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x6, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r5, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x8001, 0x8, 0x7, 0x81}, &(0x7f00000001c0)=0x98) [ 272.090606][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$alg(r0, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000040)=""/112, &(0x7f00000000c0)=0x70) sendmmsg(r4, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 272.205970][ T9368] ceph: No path or : separator in source 10:40:36 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffd}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r2, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) 10:40:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'\ve\x00\x00>\xf4\x19A', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read'}}]}}) [ 272.295153][ T9374] ceph: No path or : separator in source 10:40:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r2, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x269) sendto$inet(r2, &(0x7f0000000100)="53845cb064ecdd130766682f0dcb3b6a308d163004001200c09e02407a13a3d6397c08c9b0a03a1c", 0x28, 0x8000, 0x0, 0x0) 10:40:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000140)) close(0xffffffffffffffff) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 272.482603][ T9385] fuse: Unknown parameter ' e' [ 272.519773][ T9394] fuse: Unknown parameter ' e' 10:40:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2000000002) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) request_key(0x0, &(0x7f0000000040)={'sVz'}, 0x0, 0xfffffffffffffffc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) gettid() r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet_tcp(0x2, 0x1, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000400)=""/130, 0xfffffffffffffd7a}, {&(0x7f0000000240)=""/209, 0xd1}], 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) open(&(0x7f00000003c0)='./file1/file0\x00', 0x42900, 0x0) 10:40:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001b10400"/21, @ANYRES32=r9, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r14, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x60, &(0x7f0000000140)={@rand_addr, @broadcast, r14}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}]}, 0x48}}, 0x0) 10:40:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x10004000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sync_file_range(r3, 0xffffffffffff7fff, 0x1, 0x3) 10:40:36 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r4, &(0x7f0000000400)="c45539099fb6ee59", &(0x7f0000000480)=""/63, 0x2}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x8, 0x6, 0x4ce], 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) init_module(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r7, 0x1000002192c04) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="8a5237960064e45da7d5340005c634f1dcd4b4b65b7b83a4539b271c224118e9a98fdeb0998dfe9f574370d5dd40914e35f65c5d83d36ce952fafb91ae88dba67b418178e4370b6ccee6e4aa0ff36d9cd45f4602d117dfa06f1ed40ad16801d2fd", 0x61, r8) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x0, 0x0) 10:40:36 executing program 2: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xe9, 0x1, 0xff, "790ffb6df6ee514161b2d88f253f2940", "77fda457bf797c5988106e3c0033a544070713e4f6f1f573612bce8ac5c083a628a41c6e1c42cbed29a8e7888f1a64b4a1b93f8b356724ba1a7be31210c5c3b99fb2e327a55018f7ba5f15b96cca0f844592a0ce3c683b0153ffa003f077e510f7e56db6edd19491a5b8480a64eb1fd04edd5dae375e53d3884d141870a5b7648bcc2249dcb694bdf1c9d5a99eff0c636c933708cfca4643df986baafd88e515560b0bfef122dfe5be6406d668ec689366495fc4221a1b43f6df49826413954bd7938cb0742e54401fb505b87f5c388a06e2a598"}, 0xe9, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/ipc\x00') r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) readlinkat(r8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/48, 0xfffffffffffffff4) write$apparmor_exec(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c1) 10:40:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000140)) close(0xffffffffffffffff) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 10:40:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2000000002) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) request_key(0x0, &(0x7f0000000040)={'sVz'}, 0x0, 0xfffffffffffffffc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) gettid() r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet_tcp(0x2, 0x1, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000400)=""/130, 0xfffffffffffffd7a}, {&(0x7f0000000240)=""/209, 0xd1}], 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) open(&(0x7f00000003c0)='./file1/file0\x00', 0x42900, 0x0) 10:40:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x04\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r4, 0x0, 0x4003fff800000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x2) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000480)={0x7, 'syz_tun\x00', {0x1}, 0x40}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000240)="39d1751ff71ec04e0364fa305802f55ce63da4bedd196ad41eed24818f786971be3f372e34a69f9bb77d43dcb813dc41c990c82802de8238df5c8fdeddce5f4b73099886209f1e3638b609be6c12b7d8f7018ff56842ceaf9bbd42d365f7acf70ca0f4546c439d6755c448715a3dea7fe3761068f8caabb32687a51f714c0d6bbb0e6b8248494298356eaaca24d5c204564e5ae54bc3585a3fa051dce43f4bed9e1e1104db1e0611823f45aa8aa9d7280c1b1d30e633448c642e3a8c0f3b899cedc24d6b3b84a68e4866ea1d53776f65e874e0212c1e973abe1bb51c", 0xdc}], 0x1) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x8, 0x2, [@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000ec48bafca1a2a0467feca6716434ff6bb9f816394dfb7acf6444e0441afc0530c5f4e20e5abba5c3af37edb95e436a218c6cda9c16bf7b53ae56e1766579cf405fa3c0fbeee813983522bff1a3b70e3fe4bbbc3a7cf0d6b72a10d2a4e96ed18ffd331cf56f434c6d219900a9cb9aeecea1f701000000f874"], 0x20}}, 0x0) 10:40:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x38, 0x829, 0x0, 0x0, {0x0, 0x40000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 10:40:37 executing program 3: socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10021, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r1, r2, r3) socket$inet6(0xa, 0x80001, 0x1ff) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) memfd_create(&(0x7f0000001dc0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac\x0f\xd5x\xea\x15\xc4\xeb\xe1o\x0eNI\x1a\xac\x93\x1c\xd7\xcf:I\xb8;;\xbck@\x8d[\x92X<\xe2\xd2\xb0i\xe2\xee\x13?\xc3\x06N\xa3\x18U<&\xb0f\xde0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x9003, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000100)={r7, r0, 0x100}) fcntl$setstatus(r1, 0x4, 0x6100) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 273.597440][ T9438] bridge0: port 3(gretap0) entered disabled state [ 273.651847][ T9438] device gretap0 entered promiscuous mode [ 273.680179][ T9438] bridge0: port 3(gretap0) entered blocking state [ 273.686930][ T9438] bridge0: port 3(gretap0) entered forwarding state 10:40:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="f76a67db5f8533d0078c1d81810b499900000000000000400012ec7e00f7ab475d6932316e1f1e09003ca4d5880000000000"], 0x30}}, 0x0) 10:40:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000040)="453d2a3806c2207c137ef86903dba75d8a2406fc1c1d1949d417d4b4317e443f39cab27445ebb829d27492e61a57750bb59d6dcac3dae7c516b45331585b645f1c84a6f3bd2dfbdd082f641c59428e705d9dd1cd77d37d1e18dc580e75ef6b0b1da72abea47c2b01b613e48c1ccc", 0x6e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4932f0cb", @ANYRES16=0x0, @ANYBLOB="000000000f000000"], 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 10:40:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000140)) close(0xffffffffffffffff) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 10:40:37 executing program 2: r0 = socket$kcm(0xa, 0x122000000003, 0x11) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) r6 = dup(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r0, r6}) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000300)=@nl=@unspec, 0x1b, &(0x7f00000004c0)=[{&(0x7f0000000240)="5ee60e0f8839fe6e", 0x8}, {&(0x7f0000000440)="d4230163f48371e5555c05be47803eca69f0da482519a3f2f4e404b998331710", 0x20}], 0x2}, 0x0) 10:40:38 executing program 1: creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffffffffffff0000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) clone(0xa2166405, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:40:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x7ff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 10:40:38 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r3, 0x4}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r1, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000440)=""/165, 0xa5}], 0x1) [ 274.673381][ T9431] device hsr_slave_1 left promiscuous mode [ 274.721428][ T9460] __nla_validate_parse: 7 callbacks suppressed [ 274.721434][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.738316][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.779422][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 274.811317][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.883531][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)={{0xcc, 0x0, 0x4, 0x38d, 0x16f, 0x5, 0x36c, 0xffff}, "47ae04b3a7fa9faf1096d126bfab95fb7f3a8607a450fc2cd050f286598460637964fe98993f9bfbca50a83c6f20f8701c4fd16b412d95350b72cc59c5874af650a014b1", [[], [], [], [], [], [], []]}, 0x764) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4200, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) 10:40:39 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef1}}], 0x1, 0x0, 0x0) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8000fffffffa) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$eventfd(r7, &(0x7f00000001c0)=0x3, 0x8) 10:40:39 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r3, &(0x7f0000000000), 0x10) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) 10:40:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x80000, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="20001200100001006970366772657461700001000000020008000100", @ANYRES32=r3], 0x48}}, 0x0) 10:40:39 executing program 5: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000011) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) fallocate(r0, 0x8, 0x0, 0x10000) r3 = eventfd2(0x7371, 0x803) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)={0x3, 0x40, 0x1, 0x3, 0x1, [{0x0, 0x9, 0x5, 0x0, 0x0, 0x40}]}) 10:40:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/210, 0xd2, &(0x7f0000000080)=""/17, 0x2, 0x3}}, 0x68) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 275.184629][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.229906][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 275.229921][ T27] audit: type=1804 audit(1576492839.185:31): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir830625889/syzkaller.jWDffU/12/bus" dev="sda1" ino=16581 res=1 [ 275.241139][ T9517] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 275.279766][ T9517] overlayfs: conflicting lowerdir path [ 275.282949][ T27] audit: type=1804 audit(1576492839.235:32): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir830625889/syzkaller.jWDffU/12/bus" dev="sda1" ino=16581 res=1 [ 275.446444][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.493078][ T27] audit: type=1804 audit(1576492839.445:33): pid=9509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir830625889/syzkaller.jWDffU/12/bus" dev="sda1" ino=16581 res=1 [ 275.506757][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:40:39 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x7d, &(0x7f0000000200), 0xce) r1 = socket(0x10, 0x803, 0x0) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x101000, 0x0) watch_devices(r2, 0x40, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x3e4) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) 10:40:39 executing program 2: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) recvmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000500)=""/102400, 0x19000}], 0x3, &(0x7f0000000300)=""/238, 0xee}, 0xc0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800406, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000280)='gretap0\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000440)=0x8000, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) 10:40:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800030800000000a9030000020000002000000008000100575aff9fefebf9ae20ba855acbbe72f36b6744254ffe2e4173a057dcd8d2476d0479b7d4380144abbbb4bc94819c7fdd68561939066d757a3cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7", @ANYRES32=0x0], 0x2}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="24000000210005ff006b000421ed382002190008000000000010ffea08000100", 0x20) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x6, 0x0, &(0x7f00000000c0), 0x10000364, &(0x7f0000000100)}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f00000001c0)={0x1, 0x6, 0x200, 0x7fff}) [ 275.646332][ T27] audit: type=1804 audit(1576492839.485:34): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir830625889/syzkaller.jWDffU/12/bus" dev="sda1" ino=16581 res=1 [ 275.696966][ T9533] ------------[ cut here ]------------ [ 275.732430][ T9533] refcount_t: underflow; use-after-free. [ 275.766151][ T9533] WARNING: CPU: 1 PID: 9533 at lib/refcount.c:28 refcount_warn_saturate+0x1dc/0x1f0 [ 275.775675][ T9533] Kernel panic - not syncing: panic_on_warn set ... [ 275.782374][ T9533] CPU: 1 PID: 9533 Comm: syz-executor.5 Not tainted 5.5.0-rc1-next-20191213-syzkaller #0 [ 275.792271][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.798875][ T4094] kobject: 'loop2' (0000000010503d4d): kobject_uevent_env [ 275.802419][ T9533] Call Trace: [ 275.811959][ T4094] kobject: 'loop2' (0000000010503d4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 275.813110][ T9533] dump_stack+0x197/0x210 [ 275.813131][ T9533] ? refcount_warn_saturate+0x140/0x1f0 [ 275.843653][ T9533] panic+0x2e3/0x75c [ 275.847597][ T9533] ? add_taint.cold+0x16/0x16 [ 275.852490][ T9533] ? __kasan_check_write+0x14/0x20 [ 275.857792][ T9533] ? __warn.cold+0x14/0x3e [ 275.862219][ T9533] ? __warn+0xd9/0x1cf [ 275.866305][ T9533] ? refcount_warn_saturate+0x1dc/0x1f0 [ 275.871856][ T9533] __warn.cold+0x2f/0x3e [ 275.876136][ T9533] ? refcount_warn_saturate+0x1dc/0x1f0 [ 275.881684][ T9533] report_bug+0x289/0x300 [ 275.886096][ T9533] do_error_trap+0x11b/0x200 [ 275.890696][ T9533] do_invalid_op+0x37/0x50 [ 275.895135][ T9533] ? refcount_warn_saturate+0x1dc/0x1f0 [ 275.900845][ T9533] invalid_op+0x23/0x30 [ 275.905014][ T9533] RIP: 0010:refcount_warn_saturate+0x1dc/0x1f0 [ 275.911262][ T9533] Code: e9 d8 fe ff ff 48 89 df e8 41 31 23 fe e9 85 fe ff ff e8 a7 4e e5 fd 48 c7 c7 20 d8 6f 88 c6 05 75 96 ec 06 01 e8 73 de b5 fd <0f> 0b e9 ac fe ff ff 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 [ 275.930994][ T9533] RSP: 0018:ffffc90001707d40 EFLAGS: 00010282 [ 275.937108][ T9533] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 275.945131][ T9533] RDX: 0000000000000000 RSI: ffffffff815e8b66 RDI: fffff520002e0f9a [ 275.953111][ T9533] RBP: ffffc90001707d50 R08: ffff888055d1a300 R09: ffffed1015d26659 [ 275.961094][ T9533] R10: ffffed1015d26658 R11: ffff8880ae9332c7 R12: 0000000000000003 [ 275.969165][ T9533] R13: ffff88809448a758 R14: ffff88809448a700 R15: ffffffff8a0244c0 [ 275.977701][ T9533] ? vprintk_func+0x86/0x189 [ 275.982408][ T9533] put_watch+0xa2/0xb0 [ 275.986500][ T9533] watch_queue_release+0x34b/0xc40 [ 275.991739][ T9533] __fput+0x2ff/0x890 [ 275.995749][ T9533] ? __post_watch_notification+0x840/0x840 [ 276.001575][ T9533] ____fput+0x16/0x20 [ 276.005651][ T9533] task_work_run+0x145/0x1c0 [ 276.010489][ T9533] exit_to_usermode_loop+0x316/0x380 [ 276.015795][ T9533] do_syscall_64+0x676/0x790 [ 276.020487][ T9533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.026384][ T9533] RIP: 0033:0x4144a1 [ 276.030288][ T9533] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 276.049904][ T9533] RSP: 002b:00007ffd06dcf530 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 276.058540][ T9533] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004144a1 [ 276.066622][ T9533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 276.074771][ T9533] RBP: 0000000000000001 R08: 00000000c207758c R09: 00000000c2077590 [ 276.082760][ T9533] R10: 00007ffd06dcf610 R11: 0000000000000293 R12: 000000000075bf20 [ 276.090742][ T9533] R13: 00000000000434d3 R14: 0000000000760a68 R15: 000000000075bf2c [ 276.100870][ T9533] Kernel Offset: disabled [ 276.106754][ T9533] Rebooting in 86400 seconds..