syzkaller login: [ 228.925343][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 228.976726][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 229.015964][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 236.849892][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:22581' (ECDSA) to the list of known hosts. 1970/01/01 00:04:28 fuzzer started 1970/01/01 00:04:40 dialing manager at localhost:43611 1970/01/01 00:04:43 syscalls: 2768 1970/01/01 00:04:43 code coverage: enabled 1970/01/01 00:04:43 comparison tracing: enabled 1970/01/01 00:04:43 extra coverage: enabled 1970/01/01 00:04:43 setuid sandbox: enabled 1970/01/01 00:04:43 namespace sandbox: enabled 1970/01/01 00:04:43 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:04:43 fault injection: enabled 1970/01/01 00:04:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:04:43 net packet injection: enabled 1970/01/01 00:04:43 net device setup: enabled 1970/01/01 00:04:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:04:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:04:43 USB emulation: enabled 1970/01/01 00:04:43 hci packet injection: /dev/vhci does not exist 1970/01/01 00:04:43 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:04:43 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:04:47 fetching corpus: 50, signal 22339/23988 (executing program) 1970/01/01 00:04:49 fetching corpus: 100, signal 29867/32948 (executing program) 1970/01/01 00:04:51 fetching corpus: 150, signal 34420/38821 (executing program) 1970/01/01 00:04:53 fetching corpus: 200, signal 39568/45108 (executing program) 1970/01/01 00:04:56 fetching corpus: 250, signal 43729/50269 (executing program) 1970/01/01 00:04:59 fetching corpus: 300, signal 47772/55200 (executing program) 1970/01/01 00:05:01 fetching corpus: 350, signal 50612/58965 (executing program) 1970/01/01 00:05:04 fetching corpus: 400, signal 54366/63447 (executing program) 1970/01/01 00:05:05 fetching corpus: 450, signal 56732/66617 (executing program) 1970/01/01 00:05:07 fetching corpus: 500, signal 58690/69378 (executing program) 1970/01/01 00:05:09 fetching corpus: 550, signal 60329/71760 (executing program) 1970/01/01 00:05:11 fetching corpus: 600, signal 61590/73859 (executing program) 1970/01/01 00:05:13 fetching corpus: 650, signal 62858/75885 (executing program) 1970/01/01 00:05:15 fetching corpus: 700, signal 64161/77896 (executing program) 1970/01/01 00:05:17 fetching corpus: 750, signal 65946/80246 (executing program) 1970/01/01 00:05:19 fetching corpus: 800, signal 66539/81643 (executing program) 1970/01/01 00:05:21 fetching corpus: 850, signal 67389/83204 (executing program) 1970/01/01 00:05:23 fetching corpus: 900, signal 68500/84970 (executing program) 1970/01/01 00:05:25 fetching corpus: 950, signal 69624/86617 (executing program) 1970/01/01 00:05:27 fetching corpus: 1000, signal 70582/88158 (executing program) 1970/01/01 00:05:29 fetching corpus: 1050, signal 71496/89660 (executing program) 1970/01/01 00:05:32 fetching corpus: 1100, signal 73176/91610 (executing program) 1970/01/01 00:05:34 fetching corpus: 1150, signal 74354/93154 (executing program) 1970/01/01 00:05:35 fetching corpus: 1200, signal 75128/94448 (executing program) 1970/01/01 00:05:37 fetching corpus: 1250, signal 75963/95752 (executing program) 1970/01/01 00:05:39 fetching corpus: 1300, signal 76396/96741 (executing program) 1970/01/01 00:05:41 fetching corpus: 1350, signal 77577/98208 (executing program) 1970/01/01 00:05:44 fetching corpus: 1400, signal 78765/99664 (executing program) 1970/01/01 00:05:46 fetching corpus: 1450, signal 79611/100902 (executing program) 1970/01/01 00:05:47 fetching corpus: 1500, signal 80147/101907 (executing program) 1970/01/01 00:05:49 fetching corpus: 1550, signal 80781/102933 (executing program) 1970/01/01 00:05:51 fetching corpus: 1600, signal 81695/104097 (executing program) 1970/01/01 00:05:52 fetching corpus: 1650, signal 82401/105219 (executing program) 1970/01/01 00:05:55 fetching corpus: 1700, signal 83374/106372 (executing program) 1970/01/01 00:05:58 fetching corpus: 1750, signal 84061/107344 (executing program) 1970/01/01 00:06:00 fetching corpus: 1800, signal 84666/108258 (executing program) 1970/01/01 00:06:02 fetching corpus: 1850, signal 85733/109365 (executing program) 1970/01/01 00:06:04 fetching corpus: 1900, signal 86757/110414 (executing program) 1970/01/01 00:06:06 fetching corpus: 1950, signal 87423/111280 (executing program) 1970/01/01 00:06:08 fetching corpus: 2000, signal 88380/112247 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/112970 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/113548 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/114135 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/114701 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/115248 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/115834 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/116435 (executing program) 1970/01/01 00:06:10 fetching corpus: 2047, signal 88792/117043 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/117616 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/118236 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/118876 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/119447 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/120041 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/120631 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/121199 (executing program) 1970/01/01 00:06:11 fetching corpus: 2047, signal 88792/121757 (executing program) 1970/01/01 00:06:12 fetching corpus: 2047, signal 88792/122340 (executing program) 1970/01/01 00:06:12 fetching corpus: 2047, signal 88792/122957 (executing program) 1970/01/01 00:06:12 fetching corpus: 2047, signal 88792/123540 (executing program) 1970/01/01 00:06:12 fetching corpus: 2047, signal 88792/124139 (executing program) 1970/01/01 00:06:12 fetching corpus: 2047, signal 88792/124727 (executing program) 1970/01/01 00:06:13 fetching corpus: 2047, signal 88792/125282 (executing program) 1970/01/01 00:06:13 fetching corpus: 2047, signal 88792/125726 (executing program) 1970/01/01 00:06:13 fetching corpus: 2047, signal 88792/125726 (executing program) 1970/01/01 00:07:39 starting 2 fuzzer processes 00:07:56 executing program 0: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_vs_stats\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00', r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x14000) syz_io_uring_setup(0x7222, &(0x7f0000001480)={0x0, 0x44f1, 0x20, 0x0, 0x8c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffff9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000820}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00', r3) read(r3, &(0x7f0000001740)=""/81, 0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000017c0)=0x5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x101000, 0x0) read$FUSE(r4, &(0x7f0000001980)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003bc0)={&(0x7f00000039c0), 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0xe560}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x64010101}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003c00)=0x5c5, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000003cc0)={@isdn={0x22, 0x7f, 0xff, 0x8, 0x40}, {&(0x7f0000003c40)=""/29, 0x1d}, &(0x7f0000003c80), 0x1}, 0xa0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000003dc0)={0x0, 0x10}) [ 498.798440][ T3078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.872207][ T3078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:08:19 executing program 1: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = socket(0x3, 0x80000, 0x800) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x7, 0x7, 0x200, 0x1}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000015c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f00000002c0)={0x12b4, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x84}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_NODE={0x1178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "6202f36684ae0a98ba40dbd23577a44baa62235c"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "7c1dc7faad1812c2c1efe942b3c8db3b96aecd7e4088a5d49310c0649c73"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x93, 0x3, "ea1b2ab42496befb27a66b070c8577a491648e1571a2521cce883cae587254d89a256252df2b507240d3e557e602663964c761b13986a04fecd9ff71ec64c83c4ccc018e6e822b67bba59e67eead37602b4dac655e39b9c699de300f7f1ee5f8ae9a65b535670f88253bacaea24791da4cff7db0e059c3681025f0a1ed4b37a63476f9b5f18e443cf670c175478b2b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e31bae3266cc8789fc6db063555a1a2ea81c2e4dfed9390ed8f0bc1d8d18408a9fd1"}}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x4008001}, 0x4040) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000001600)=0x2) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001700)={0xc, 0x0, &(0x7f0000001640)=[@increfs={0x40046304, 0x1}, @register_looper], 0x79, 0x0, &(0x7f0000001680)="032f0667db0f9dbeab376201189770212c60413272214f6d05c0a7d3f9191dacf884450b96ebbfeefc3f7f51b2ccd0021d499f56039719a80fdb709d54c06ef6cf95997890c6f2cb018984c678b92eb3c028c9bbb479bf1ce0107b668707a00c526036255121086ad6e3f5ae37061230c7001a9dfc10f595b6"}) write$tcp_congestion(r0, &(0x7f0000001740)='reno\x00', 0x5) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000001780)={0x1, 0xffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000017c0)={0xfffffff7, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r4 = fcntl$dupfd(r2, 0x2c78b83f65501177, r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000001a40)={0x4, 0x4, 0x1af0, 0xe0e0e0e0}) [ 506.466729][ T3078] device hsr_slave_0 entered promiscuous mode [ 506.513310][ T3078] device hsr_slave_1 entered promiscuous mode [ 510.727197][ T3078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 510.864575][ T3078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 511.024037][ T3078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 511.307999][ T3078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.947188][ T3078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.205915][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.277732][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.363584][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.403198][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.941534][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.974108][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.164042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 527.358800][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 528.062375][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 528.115188][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 528.418366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 528.458834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 528.655342][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 529.234579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 529.238083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.178544][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.333975][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.399438][ T3273] device hsr_slave_0 entered promiscuous mode [ 538.445235][ T3273] device hsr_slave_1 entered promiscuous mode [ 538.468323][ T3273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.475558][ T3273] Cannot create hsr debugfs directory [ 541.553258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 541.598950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 542.787021][ T3273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 542.979185][ T3273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.094327][ T3273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.199363][ T3273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.199767][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.303096][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.385871][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.443292][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.554117][ T3078] device veth0_vlan entered promiscuous mode [ 548.029243][ T3078] device veth1_vlan entered promiscuous mode [ 549.238702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.285833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.538762][ T3078] device veth0_macvtap entered promiscuous mode [ 549.943413][ T3078] device veth1_macvtap entered promiscuous mode [ 551.256355][ T3078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.282818][ T3078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.287212][ T3078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.323152][ T3078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.435392][ T3299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.504775][ T3299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.523312][ T3299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.545354][ T3299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.816993][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.535970][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.603397][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.463916][ T3078] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 562.392708][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 562.416361][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.205260][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.304794][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.347450][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 564.478229][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.925631][ T3273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 565.927621][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 566.189673][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 566.233080][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.267094][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 566.299223][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.393712][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.176357][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 567.216499][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:09:25 executing program 0: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_vs_stats\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00', r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x14000) syz_io_uring_setup(0x7222, &(0x7f0000001480)={0x0, 0x44f1, 0x20, 0x0, 0x8c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffff9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000820}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00', r3) read(r3, &(0x7f0000001740)=""/81, 0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000017c0)=0x5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x101000, 0x0) read$FUSE(r4, &(0x7f0000001980)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003bc0)={&(0x7f00000039c0), 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0xe560}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x64010101}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003c00)=0x5c5, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000003cc0)={@isdn={0x22, 0x7f, 0xff, 0x8, 0x40}, {&(0x7f0000003c40)=""/29, 0x1d}, &(0x7f0000003c80), 0x1}, 0xa0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000003dc0)={0x0, 0x10}) 00:09:33 executing program 0: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_vs_stats\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00', r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x14000) syz_io_uring_setup(0x7222, &(0x7f0000001480)={0x0, 0x44f1, 0x20, 0x0, 0x8c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffff9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000820}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00', r3) read(r3, &(0x7f0000001740)=""/81, 0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000017c0)=0x5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x101000, 0x0) read$FUSE(r4, &(0x7f0000001980)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003bc0)={&(0x7f00000039c0), 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0xe560}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x64010101}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003c00)=0x5c5, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000003cc0)={@isdn={0x22, 0x7f, 0xff, 0x8, 0x40}, {&(0x7f0000003c40)=""/29, 0x1d}, &(0x7f0000003c80), 0x1}, 0xa0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000003dc0)={0x0, 0x10}) 00:09:43 executing program 0: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_vs_stats\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00', r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x14000) syz_io_uring_setup(0x7222, &(0x7f0000001480)={0x0, 0x44f1, 0x20, 0x0, 0x8c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffff9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000820}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00', r3) read(r3, &(0x7f0000001740)=""/81, 0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000017c0)=0x5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x101000, 0x0) read$FUSE(r4, &(0x7f0000001980)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003bc0)={&(0x7f00000039c0), 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0xe560}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x64010101}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003c00)=0x5c5, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000003cc0)={@isdn={0x22, 0x7f, 0xff, 0x8, 0x40}, {&(0x7f0000003c40)=""/29, 0x1d}, &(0x7f0000003c80), 0x1}, 0xa0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000003dc0)={0x0, 0x10}) [ 586.215074][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.258997][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 599.435771][ T3273] device veth0_vlan entered promiscuous mode [ 600.033649][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 600.093572][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 600.176338][ T3273] device veth1_vlan entered promiscuous mode [ 600.286742][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 600.427252][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.666221][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 601.715632][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 601.899332][ T3273] device veth0_macvtap entered promiscuous mode [ 602.146905][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.259379][ T3273] device veth1_macvtap entered promiscuous mode [ 603.009758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.071649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.439945][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.493239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.717296][ T3273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.724443][ T3273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.726439][ T3273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.728232][ T3273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:10:08 executing program 0: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_vs_stats\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00', r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x14000) syz_io_uring_setup(0x7222, &(0x7f0000001480)={0x0, 0x44f1, 0x20, 0x0, 0x8c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffff9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000820}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00', r3) read(r3, &(0x7f0000001740)=""/81, 0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000017c0)=0x5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x101000, 0x0) read$FUSE(r4, &(0x7f0000001980)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003bc0)={&(0x7f00000039c0), 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0xe560}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x64010101}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003c00)=0x5c5, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000003cc0)={@isdn={0x22, 0x7f, 0xff, 0x8, 0x40}, {&(0x7f0000003c40)=""/29, 0x1d}, &(0x7f0000003c80), 0x1}, 0xa0) 00:10:08 executing program 1: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_vs_stats\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00', r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x14000) syz_io_uring_setup(0x7222, &(0x7f0000001480)={0x0, 0x44f1, 0x20, 0x0, 0x8c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffff9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000820}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00', r3) read(r3, &(0x7f0000001740)=""/81, 0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000017c0)=0x5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x101000, 0x0) read$FUSE(r4, &(0x7f0000001980)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003bc0)={&(0x7f00000039c0), 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0xe560}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x64010101}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003c00)=0x5c5, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000003cc0)={@isdn={0x22, 0x7f, 0xff, 0x8, 0x40}, {&(0x7f0000003c40)=""/29, 0x1d}, &(0x7f0000003c80), 0x1}, 0xa0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000003dc0)={0x0, 0x10}) 00:10:18 executing program 0: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_vs_stats\x00') syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00', r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x14000) syz_io_uring_setup(0x7222, &(0x7f0000001480)={0x0, 0x44f1, 0x20, 0x0, 0x8c, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffff9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000820}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700)='nl80211\x00', r3) read(r3, &(0x7f0000001740)=""/81, 0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000017c0)=0x5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x101000, 0x0) read$FUSE(r4, &(0x7f0000001980)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000003bc0)={&(0x7f00000039c0), 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0xe560}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x64010101}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000003c00)=0x5c5, 0x4) 00:10:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x0, 0x40}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x10001, 0x3a5b5493, 0x7}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) sendto(r2, &(0x7f0000000340)="ba2209", 0x3, 0x20048010, &(0x7f0000000380)=@sco, 0x80) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'veth1_macvtap\x00', {0x2, 0x0, @private}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001600200029bd7000fbdbdf251c00000028fb2533c50a17a2abdd05b625e4df50a3b7f64e54f08745a1252044e47d732e79862e5e424528c3c3c564c19976ba8496780f508b3226aa8913a8500c5bb6487dcf8397727534314795ad4f960049c40a539e94a08636485e7125b67c220d3ad9abefc9b94cd32359d99dee5997f80963a146cdf1ab990618483ebf993c9bcd247026198d285593e907cddb12161f311dce05435fd3024b89b479cda72dc549ea3416506d2e98555eb64b005450ab9af14f340c13453387ad8533b1f87a6630356497f34c3c4fb14ca4d9ef0b7b9ae3a03d977e1dd17d7fcdc499dffb4f2277eab83ca091d9b7cf55cdbf784c0dad548eb0d76b7b572f69ab0fdf89ccff63e592afb803d71200490076657468315f6d6163763461700000000c008c0008000000000000001200550076657468315f6d616376746d70000000000000"], 0x150}, 0x1, 0x0, 0x0, 0xc810}, 0x4010) [ 624.022528][ T3622] Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000020000040 [ 624.025561][ T3622] Oops [#1] [ 624.026316][ T3622] Modules linked in: [ 624.027703][ T3622] CPU: 0 PID: 3622 Comm: syz-executor.1 Not tainted 5.12.0-rc2-syzkaller-00474-ga5406a7ff56e #0 [ 624.029104][ T3622] Hardware name: riscv-virtio,qemu (DT) [ 624.030275][ T3622] epc : sock_ioctl+0x4c4/0x66c [ 624.031650][ T3622] ra : sock_ioctl+0x4c4/0x66c [ 624.032770][ T3622] epc : ffffffe0020e2068 ra : ffffffe0020e2068 sp : ffffffe007037da0 [ 624.033969][ T3622] gp : ffffffe004588910 tp : ffffffe00674af80 t0 : 0000000000000000 [ 624.035164][ T3622] t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe007037e30 [ 624.036321][ T3622] s1 : 0000000000040000 a0 : 0000000000000000 a1 : 0000000000000007 [ 624.037479][ T3622] a2 : 1ffffffc00ce95f0 a3 : ffffffe002a8f8e6 a4 : 0000000000000000 [ 624.038678][ T3622] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000084ac8 [ 624.039779][ T3622] s2 : 0000000000000000 s3 : 0000000000008902 s4 : 0000000020000040 [ 624.041468][ T3622] s5 : ffffffe00458c0d0 s6 : ffffffe00d0e0000 s7 : ffffffe009f81c80 [ 624.042704][ T3622] s8 : 0000000000008903 s9 : ffffffe00d0e00c0 s10: 0000000000000000 [ 624.044054][ T3622] s11: 0000000000020000 t3 : f1694d8924cce000 t4 : ffffffc403906fb2 [ 624.045326][ T3622] t5 : ffffffc403906fba t6 : 0000000000040000 [ 624.046280][ T3622] status: 0000000000000120 badaddr: 0000000020000040 cause: 000000000000000f [ 624.047470][ T3622] Call Trace: [ 624.048164][ T3622] [] sock_ioctl+0x4c4/0x66c [ 624.049667][ T3622] [] sys_ioctl+0x5c2/0xd56 [ 624.051431][ T3622] [] ret_from_syscall+0x0/0x2 [ 624.281863][ T3622] ---[ end trace cca4b482199bd727 ]--- [ 624.283830][ T3622] Kernel panic - not syncing: Fatal exception [ 624.285482][ T3622] SMP: stopping secondary CPUs [ 624.287431][ T3622] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:51:45 Registers: info registers vcpu 0 pc 000000000005b320 mhartid 0000000000000000 mstatus 00000000000040a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc 0000000000081f54 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra 00000000000531e4 x2/sp 0000003fa4383e08 x3/gp 0000003fa40ad980 x4/tp 0000003fa40ad980 x5/t0 0000003fa401a800 x6/t1 0000003fa401a800 x7/t2 0000003fa490e400 x8/s0 0000000000000000 x9/s1 0000000000000001 x10/a0 0000003fa43823a0 x11/a1 00000090ef11053c x12/a2 0000009128460b04 x13/a3 0000000000000004 x14/a4 0000003fa401a800 x15/a5 0000000000000000 x16/a6 0000000000000002 x17/a7 0000000000000011 x18/s2 0000000000000010 x19/s3 0000000000000007 x20/s4 0000000000000002 x21/s5 0000000000000003 x22/s6 0000000000000002 x23/s7 0000000000000000 x24/s8 0000000000000000 x25/s9 0000000000000008 x26/s10 00000000000000f5 x27/s11 00000000000000f5 x28/t3 000000000001fffe x29/t4 0000003fa4080d70 x30/t5 0000003fa4080d69 x31/t6 0000000000081ed0 f0/ft0 3f83fad5421d3512 f1/ft1 3f847ae147ae147b f2/ft2 419ddd83513d079f f3/ft3 413397a000000000 f4/ft4 3ff74baefb08be7d f5/ft5 3fdb2789b3fddcee f6/ft6 3fe0000000000000 f7/ft7 3fb361d930088c48 f8/fs0 3feb492ed287c928 f9/fs1 3f8d9f6428df0fc0 f10/fa0 3fb03991c128e82d f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe000c17f2a mhartid 0000000000000001 mstatus 00000000000001a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc ffffffe0020e2068 mcause 0000000000000009 scause 000000000000000f mtval 0000000000000000 stval 0000000020000040 x0/zero 0000000000000000 x1/ra ffffffe000c17f2a x2/sp ffffffe007037760 x3/gp ffffffe004588910 x4/tp ffffffe00674af80 x5/t0 ffffffe004ffdbb7 x6/t1 ffffffc4009ffb76 x7/t2 0000000000000000 x8/s0 ffffffe007037790 x9/s1 ffffffe005230480 x10/a0 ffffffe0052304c8 x11/a1 ffffffd000633000 x12/a2 1ffffffc00a46099 x13/a3 ffffffe000c17f2a x14/a4 0000000000000000 x15/a5 ffffffe0052304c8 x16/a6 0000000000f00000 x17/a7 ffffffe004ffdbb6 x18/s2 ffffffd000633000 x19/s3 0000000000000033 x20/s4 000000000000002a x21/s5 ffffffe000c17184 x22/s6 ffffffe005230480 x23/s7 ffffffe0052304d8 x24/s8 0000000000000001 x25/s9 ffffffe00458c0d0 x26/s10 ffffffe005230708 x27/s11 ffffffe0052304d0 x28/t3 000000000000004d x29/t4 ffffffc4009ffb74 x30/t5 ffffffc4009ffb77 x31/t6 ffffffe004ffdbb7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000