[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts. 2020/09/26 01:45:56 fuzzer started 2020/09/26 01:45:56 dialing manager at 10.128.0.105:39505 2020/09/26 01:45:56 syscalls: 3234 2020/09/26 01:45:56 code coverage: enabled 2020/09/26 01:45:56 comparison tracing: enabled 2020/09/26 01:45:56 extra coverage: extra coverage is not supported by the kernel 2020/09/26 01:45:56 setuid sandbox: enabled 2020/09/26 01:45:56 namespace sandbox: enabled 2020/09/26 01:45:56 Android sandbox: enabled 2020/09/26 01:45:56 fault injection: enabled 2020/09/26 01:45:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/26 01:45:56 net packet injection: enabled 2020/09/26 01:45:56 net device setup: enabled 2020/09/26 01:45:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/26 01:45:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/26 01:45:56 USB emulation: /dev/raw-gadget does not exist 2020/09/26 01:45:56 hci packet injection: enabled 2020/09/26 01:45:56 wifi device emulation: enabled 01:47:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) syzkaller login: [ 139.855908] audit: type=1400 audit(1601084857.152:8): avc: denied { execmem } for pid=6513 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:47:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 01:47:37 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x10084, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) listxattr(&(0x7f0000000200)='./bus\x00', 0x0, 0x2) 01:47:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f041}) write$binfmt_misc(r0, 0x0, 0x1004) 01:47:37 executing program 4: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486d", 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000), 0x0) 01:47:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[0x2], [], @empty}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@pktinfo={{0x20, 0x29, 0x32, {@local}}}], 0x20}}], 0x2, 0x0) [ 140.994913] IPVS: ftp: loaded support on port[0] = 21 [ 141.107287] chnl_net:caif_netlink_parms(): no params data found [ 141.195076] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.203177] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.212338] device bridge_slave_0 entered promiscuous mode [ 141.231919] IPVS: ftp: loaded support on port[0] = 21 [ 141.238559] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.245045] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.252495] device bridge_slave_1 entered promiscuous mode [ 141.330742] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.342636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.345645] IPVS: ftp: loaded support on port[0] = 21 [ 141.372493] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.380560] team0: Port device team_slave_0 added [ 141.393081] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.401718] team0: Port device team_slave_1 added [ 141.466160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.472415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.507022] IPVS: ftp: loaded support on port[0] = 21 [ 141.519281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.531599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.538619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.565252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.584223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 141.617205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 141.671979] IPVS: ftp: loaded support on port[0] = 21 [ 141.680761] device hsr_slave_0 entered promiscuous mode [ 141.692058] device hsr_slave_1 entered promiscuous mode [ 141.698695] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 141.716400] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 141.869424] IPVS: ftp: loaded support on port[0] = 21 [ 141.933056] chnl_net:caif_netlink_parms(): no params data found [ 142.010179] chnl_net:caif_netlink_parms(): no params data found [ 142.066353] chnl_net:caif_netlink_parms(): no params data found [ 142.216042] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.292563] chnl_net:caif_netlink_parms(): no params data found [ 142.390439] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.396895] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.405503] device bridge_slave_0 entered promiscuous mode [ 142.414028] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.420375] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.428336] device bridge_slave_1 entered promiscuous mode [ 142.450362] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.459317] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.467073] device bridge_slave_0 entered promiscuous mode [ 142.473490] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.479833] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.487948] device bridge_slave_0 entered promiscuous mode [ 142.501721] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.509343] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.516785] device bridge_slave_1 entered promiscuous mode [ 142.529605] chnl_net:caif_netlink_parms(): no params data found [ 142.546713] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.553078] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.561724] device bridge_slave_1 entered promiscuous mode [ 142.577401] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.586969] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.609888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.654443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.664189] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.671614] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.696728] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.706243] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.726447] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.734043] team0: Port device team_slave_0 added [ 142.772168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.778923] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.786801] team0: Port device team_slave_1 added [ 142.798952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.806351] team0: Port device team_slave_0 added [ 142.811559] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.821973] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.830008] device bridge_slave_0 entered promiscuous mode [ 142.839270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.847035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.861487] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.870164] team0: Port device team_slave_0 added [ 142.875868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.884019] team0: Port device team_slave_1 added [ 142.889304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.897343] team0: Port device team_slave_1 added [ 142.902574] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.909181] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.916445] device bridge_slave_1 entered promiscuous mode [ 142.923835] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 142.929892] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.951835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.958210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.983454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.007222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.014176] Bluetooth: hci0: command 0x0409 tx timeout [ 143.015653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.045822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.061678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.075570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.098638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.119654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.125962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.151950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.163051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.169590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.195150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.208160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.216280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.224299] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.230748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.238058] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.245616] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.252608] device bridge_slave_0 entered promiscuous mode [ 143.253309] Bluetooth: hci1: command 0x0409 tx timeout [ 143.262357] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.270083] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.277243] device bridge_slave_1 entered promiscuous mode [ 143.287481] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.302765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.312824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.319667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.345533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.353542] Bluetooth: hci2: command 0x0409 tx timeout [ 143.357810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.367307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.392626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.403391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.410772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.423336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.431235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.442561] device hsr_slave_0 entered promiscuous mode [ 143.448237] device hsr_slave_1 entered promiscuous mode [ 143.454649] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.468050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.493307] Bluetooth: hci3: command 0x0409 tx timeout [ 143.500936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.512279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.520267] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.526659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.536811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.544697] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.552033] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.563100] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.570597] team0: Port device team_slave_0 added [ 143.579074] device hsr_slave_0 entered promiscuous mode [ 143.585948] device hsr_slave_1 entered promiscuous mode [ 143.592772] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.601209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.610949] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.636871] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.644570] team0: Port device team_slave_1 added [ 143.649898] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.656658] Bluetooth: hci4: command 0x0409 tx timeout [ 143.668932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.698517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.720414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.731625] device hsr_slave_0 entered promiscuous mode [ 143.737432] device hsr_slave_1 entered promiscuous mode [ 143.743762] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.751372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.766631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.775273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.787843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.795964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.802195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.813306] Bluetooth: hci5: command 0x0409 tx timeout [ 143.833789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.845500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.855067] team0: Port device team_slave_0 added [ 143.860359] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.872896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.879948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.906269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.928337] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.935809] team0: Port device team_slave_1 added [ 143.959118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.972412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.988494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.995831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.021562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.032721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.043841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.051505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.092004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.098695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.125527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.157302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 144.169355] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.177227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.185846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.201027] device hsr_slave_0 entered promiscuous mode [ 144.206916] device hsr_slave_1 entered promiscuous mode [ 144.213071] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.233034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.240587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.256586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 144.286980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.295154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.306776] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 144.312801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.368517] device hsr_slave_0 entered promiscuous mode [ 144.375191] device hsr_slave_1 entered promiscuous mode [ 144.381339] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.389723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.437013] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 144.474605] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 144.481832] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.497238] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.505816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.512472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.546460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.600891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.621868] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 144.652853] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 144.690786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.699132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.749166] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.768207] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.776373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.797744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.812834] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 144.820893] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 144.828141] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 144.845957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.857731] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 144.866938] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.874094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.881538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.890094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.897514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.909322] device veth0_vlan entered promiscuous mode [ 144.917757] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.927695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.939203] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.946130] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.954285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.961174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.968958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.976336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.987994] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.994346] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.012744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.032032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.041687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.052536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.060861] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.067246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.076200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.086059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.093811] Bluetooth: hci0: command 0x041b tx timeout [ 145.097298] device veth1_vlan entered promiscuous mode [ 145.105675] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 145.113009] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.121611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.129094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.136489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.144663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.152190] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.158565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.166031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.174622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.182197] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.188570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.196148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.206518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.216470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.227242] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.237164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.245737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.255421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.262955] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.269336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.277048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.284305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.292901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.303549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.322642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.332148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.334835] Bluetooth: hci1: command 0x041b tx timeout [ 145.346399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.356838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.365661] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.371721] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.380604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.387589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.398354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.406313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.415095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.422222] Bluetooth: hci2: command 0x041b tx timeout [ 145.428845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.438972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.449819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.459569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.470324] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 145.478455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.487410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.495628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.503965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.511508] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.517906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.524948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.532658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.540494] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.546915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.555249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.561705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.571346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.578271] Bluetooth: hci3: command 0x041b tx timeout [ 145.585634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.595304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.604489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.612249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.620771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.628733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.636606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.644915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.653868] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.660967] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 145.672648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.685093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.694872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.701627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.711797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.719966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.727984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.736173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.744501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.751932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.759520] Bluetooth: hci4: command 0x041b tx timeout [ 145.762879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.772798] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.780899] device veth0_macvtap entered promiscuous mode [ 145.787500] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 145.798540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.808907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.816583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.828366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.835972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.842797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.850131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.857230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.865593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.873390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.880919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.888865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.899592] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.906092] Bluetooth: hci5: command 0x041b tx timeout [ 145.910386] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.919683] device veth1_macvtap entered promiscuous mode [ 145.926845] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 145.936140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.948166] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.954384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.965891] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.971947] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.981885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.991203] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.998870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.007525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.015521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.023795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.031558] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.037950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.044866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.055105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 146.067220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.076581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.088153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.096581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.105033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.112417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.120734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.128714] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.135122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.142570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.151729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.159417] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.165826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.174417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.182130] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.189194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.205525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.214848] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.225225] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.233855] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.242115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 146.251082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.259259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.267156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.275431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.282084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.290669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.301535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.309960] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.326045] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 146.336223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.347342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.356459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.364628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.372414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.380958] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.387370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.394978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.401630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.409364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.417337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.425636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.433538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.441033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.450693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.464062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.477090] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 146.484383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.493513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.501073] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.508159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.519135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.528404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.537216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.545434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.553678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.561517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.570410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.585953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.601927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.609489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.618273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.626458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.636875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.666272] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 146.676546] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 146.684568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.692059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.704002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.711853] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.720493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.729978] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 146.738093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.746573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.760413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.768983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.777653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.785873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.794334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.805471] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.816347] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 146.826663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.845324] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.851339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.878396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.886255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.892934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.901962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.910317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.918284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.931118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.940240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.961626] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.982915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.992051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.004259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.014125] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.026025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.043880] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.050811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.060435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.068885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.077458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.084709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.095549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.113311] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 147.120357] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 147.128412] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 147.146038] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.160645] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 147.168084] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 147.176693] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 147.187432] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.194551] Bluetooth: hci0: command 0x040f tx timeout [ 147.202751] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 147.222514] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 147.231727] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 147.241616] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 147.250691] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 147.264200] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.276182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.284156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.294776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.302148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.311177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.319449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.327517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.336337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.344590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.351249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.360578] device veth0_vlan entered promiscuous mode [ 147.370595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.378366] device veth0_vlan entered promiscuous mode [ 147.384890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.391878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.399937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.407271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.423860] Bluetooth: hci1: command 0x040f tx timeout [ 147.481807] device veth1_vlan entered promiscuous mode [ 147.502303] Bluetooth: hci2: command 0x040f tx timeout [ 147.510402] device veth1_vlan entered promiscuous mode [ 147.524327] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 147.531297] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 147.539265] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 147.554118] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 147.594666] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 147.602665] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.618518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.628151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.641892] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 147.652738] device veth0_vlan entered promiscuous mode [ 147.663940] Bluetooth: hci3: command 0x040f tx timeout [ 147.675049] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 147.682007] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 147.691974] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 147.703806] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 147.712208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.719314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.727462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.736286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.747205] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 147.764985] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 147.772954] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 147.780707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.791452] device veth0_macvtap entered promiscuous mode [ 147.793872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.801558] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 147.812106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.820483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.829251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.837927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.845724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.854251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.862229] Bluetooth: hci4: command 0x040f tx timeout [ 147.864461] device veth0_macvtap entered promiscuous mode [ 147.874975] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 147.887660] device veth1_vlan entered promiscuous mode [ 147.900298] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 147.908992] device veth1_macvtap entered promiscuous mode [ 147.915643] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 147.924758] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 147.937444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.951597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.959331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.967128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.975162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.982802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.989739] Bluetooth: hci5: command 0x040f tx timeout [ 147.991524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.004548] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 148.024773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 148.032693] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.042725] device veth0_vlan entered promiscuous mode [ 148.050406] device veth1_macvtap entered promiscuous mode [ 148.064182] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 148.072140] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 148.080988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.082539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 148.096064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.105400] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 148.118836] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 148.126575] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 148.137825] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 148.145456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 148.154653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.161869] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.170533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.177911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.186403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.199736] device veth1_vlan entered promiscuous mode [ 148.206773] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 148.217016] device veth0_macvtap entered promiscuous mode [ 148.224222] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 148.244365] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 148.262813] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 148.279702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 148.292817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 01:47:45 executing program 0: unshare(0x2a000400) bpf$MAP_CREATE(0x8, 0x0, 0x0) [ 148.304671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.316100] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 148.325005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.334332] device veth1_macvtap entered promiscuous mode [ 148.340502] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 148.350580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.360936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.380020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.395682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 01:47:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 148.407613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.417279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.429458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.438547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.454875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.471681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.481595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.491728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.502825] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 148.510092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.518747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.526409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.534674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.542399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.556854] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.566145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.576415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.586624] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 148.594214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.600791] device veth0_vlan entered promiscuous mode [ 148.607378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.624615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 148.631744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.641549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.651380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.661202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.671491] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 148.678818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.689451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.698502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.706612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.714517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.730513] device veth1_vlan entered promiscuous mode [ 148.740533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 148.751314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.774466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.785131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.796026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.805846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.815011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.824780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.835356] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 148.842270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.851665] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 148.871651] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.884257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.893284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.901327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.910668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.921758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 01:47:46 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000200ff"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 148.932103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.942039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.951821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.961101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.971046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.984501] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 148.991695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.001226] device veth0_macvtap entered promiscuous mode [ 149.010311] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 149.020791] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 149.029299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.037002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.049191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.057916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.065829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.079450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.091099] device veth1_macvtap entered promiscuous mode [ 149.097722] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 149.108657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 149.137924] device veth0_macvtap entered promiscuous mode [ 149.144980] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 149.157291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 149.184324] device veth1_macvtap entered promiscuous mode [ 149.190472] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 149.253694] Bluetooth: hci0: command 0x0419 tx timeout [ 149.421267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.435367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.446947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.459229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.469043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.479320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.488826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.498990] Bluetooth: hci1: command 0x0419 tx timeout [ 149.503536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.515646] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 149.522631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.534340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.547017] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.558973] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.570797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.580609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.583285] Bluetooth: hci2: command 0x0419 tx timeout [ 149.590324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 149.604723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.614669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.624161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.633930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.643096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.652813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.662747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.672810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.683222] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 149.690087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.708817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:47:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=ANY=[@ANYBLOB="3c1c00002800270d00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff"], 0x1c3c}}, 0x0) [ 149.733002] Bluetooth: hci3: command 0x0419 tx timeout [ 149.741011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 149.753304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.761846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.826165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.867927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.877865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.887741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.897286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.907938] Bluetooth: hci4: command 0x0419 tx timeout [ 149.908534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.922547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.932312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.941730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.951508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.961830] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 149.969579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.984362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.014012] netlink: 7192 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.036184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.045649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.053732] Bluetooth: hci5: command 0x0419 tx timeout [ 150.060077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.086596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.103536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.112650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.122653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.131862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.142358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.151564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.161353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.170526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.180839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.191563] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 150.199300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.222586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 01:47:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000d00)=""/247, 0xf7}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10132) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0) [ 150.236154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.252320] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready 01:47:47 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff019a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) [ 150.338559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.355030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.391282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.409324] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 150.425465] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 01:47:47 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000001300)="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", 0xdfb, 0x5}]) [ 150.481647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.484633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.501368] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 150.503326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.520176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.532309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.563012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.570126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.608968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.618817] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 150.624122] loop0: partition table partially beyond EOD, truncated [ 150.634495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.640115] loop0: p1 size 131699019 extends beyond EOD, truncated [ 150.670391] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 150.686844] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 150.698521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.707341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.713934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.715239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.731043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.739139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.753622] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 150.777825] loop0: partition table partially beyond EOD, truncated [ 150.815029] loop0: p1 size 131699019 extends beyond EOD, truncated [ 150.852488] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 150.879175] vivid-007: disconnect [ 150.890537] vivid-007: reconnect 01:47:48 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x80047453, 0x0) 01:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}}, 0x0) [ 150.909068] audit: type=1800 audit(1601084868.202:9): pid=8019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15753 res=0 [ 150.940072] vivid-007: disconnect [ 150.970317] vivid-007: reconnect [ 150.974329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.981437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:47:48 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) [ 151.050280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.072469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.095111] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 151.121691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.178548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.182021] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 151.193155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.205301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.214107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.236839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.263753] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 151.270012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.297104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.307665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.317045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:47:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7]}, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 01:47:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 01:47:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) 01:47:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCGNPMODE(r0, 0x4004743c, 0x0) 01:47:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) 01:47:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x1d, 0xcc, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480), &(0x7f00000000c0), 0x3, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x2, r0}, 0x38) 01:47:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) [ 152.157279] syz-executor.3 (8109) used obsolete PPPIOCDETACH ioctl 01:47:49 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='/dev/media#\x00\t\xfb4\xe1b\xd8\x9f\x89\xa4\xe3\x87\xf6\f;h\xba\xf0\f7,W\x8c\x96F\v\xcb\xc6\x11M/\x84\xba\xf0\x82Sq\xd1^\x195\x00\x00\x00\x00(\x00\x00\x00\x00k', 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x13, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)) 01:47:49 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @timestamp, @mss, @sack_perm, @window], 0x200000000000013e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0xfffffffffffffed3) 01:47:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01020000000000000000020000000900010073797a300000000014000480080002400000000008000140000000800900030073797a3200000000080007"], 0xc0}}, 0x0) 01:47:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x66, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) 01:47:49 executing program 4: openat$dsp1(0xffffff9c, &(0x7f0000000c40)='/dev/dsp1\x00', 0x185005, 0x0) 01:47:49 executing program 3: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f00000000c0)={0xa00000, 0x45867457, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x1, [], @p_u16=&(0x7f0000000040)=0x9}}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x1, 0x40101) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x408000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 01:47:49 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x5}, 0xff94) 01:47:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x28, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x4}]}, 0x28}}, 0x0) 01:47:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:47:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) 01:47:49 executing program 1: ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x42) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000200)=0x10) 01:47:49 executing program 4: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x6000) [ 152.488571] device batadv0 entered promiscuous mode [ 152.499111] device macvtap1 entered promiscuous mode [ 152.511113] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 152.552264] device batadv0 left promiscuous mode 01:47:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hoplimit={{0x10, 0x29, 0x34, 0x7ff}}], 0x10}}], 0x2, 0x0) [ 152.956690] device batadv0 entered promiscuous mode [ 152.961943] device macvtap1 entered promiscuous mode [ 152.970913] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 152.983462] device batadv0 left promiscuous mode 01:47:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1000000}}, 0x20) 01:47:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) dup(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x109801, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 01:47:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="a8", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)="8c", 0x1}], 0x1, &(0x7f0000000800)=[@hopopts_2292={{0x14}}], 0x14}}], 0x2, 0x4c021) 01:47:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x10000100, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 153.227015] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. 01:47:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0x91, 0x19ba, 0x20}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:47:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4) 01:47:50 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r0, 0x0, 0x0, 0x47, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x2}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x82102) pwritev(r2, &(0x7f0000001b40)=[{&(0x7f0000000900)='D', 0x1}], 0x1, 0x0, 0x7) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ftruncate(0xffffffffffffffff, 0xee72) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 01:47:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 01:47:50 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0201630000000a000000ff45ac0000ffffff8100e931190000000000000680ffffffa6000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 153.291194] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 153.301175] team0: Port device veth3 added 01:47:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 01:47:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCSLCKTRMIOS(r0, 0x5605, 0x0) [ 153.421307] loop5: p1 p2 p3 p4 [ 153.428091] loop5: partition table partially beyond EOD, truncated [ 153.450431] hrtimer: interrupt took 64630 ns [ 153.455733] loop5: p1 start 10 is beyond EOD, truncated 01:47:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="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"}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x68d) [ 153.474721] loop5: p2 start 25 is beyond EOD, truncated [ 153.481860] loop5: p3 start 4293001441 is beyond EOD, truncated [ 153.510934] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:47:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000002c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, 0x5c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:47:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) dup(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x109801, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 01:47:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 01:47:51 executing program 5: r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'macsec0\x00', @random}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'macsec0\x00', @broadcast}) [ 153.678977] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 153.759911] nla_parse: 1 callbacks suppressed 01:47:51 executing program 0: syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x4}, @local, {[@timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x0, [{@private}, {@multicast1}, {@broadcast}, {@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) [ 153.759934] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. 01:47:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 153.759966] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.764229] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 153.863424] IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready [ 153.878507] team0: Port device veth5 added [ 153.885681] device veth1_macvtap left promiscuous mode 01:47:51 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r0, 0x0, 0x0, 0x47, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x2}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x82102) pwritev(r2, &(0x7f0000001b40)=[{&(0x7f0000000900)='D', 0x1}], 0x1, 0x0, 0x7) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ftruncate(0xffffffffffffffff, 0xee72) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 01:47:51 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) 01:47:51 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x18) lseek(r0, 0x0, 0x1) 01:47:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) 01:47:51 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000380)={0x1, 0x6}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0)={0x2, 0xfe}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000005a80)={0x2, 0xfe}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3c}, 0x2) [ 154.836936] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.850031] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.880012] IPv6: ADDRCONF(NETDEV_UP): veth7: link is not ready [ 154.896612] team0: Port device veth7 added 01:47:52 executing program 3: rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)) open(0x0, 0x0, 0x0) 01:47:52 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x8}]}}}]}, 0x44}}, 0x0) 01:47:52 executing program 5: write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="35db30f1dbc3b4d6cbd2bef3985a881c0ba93c", 0x13) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b63299667b70536342623b372d80eefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6a9b4a8dee825286b31a260e60482bb0b4179b310d", 0xff7c}], 0x1) 01:47:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) dup(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x109801, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 01:47:52 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010000535d25a80648c63940d0324fc60100002400a000200053582c137153e370900018003001700d1bd", 0x2e}], 0x1}, 0x0) [ 154.929038] syz-executor.1 (8251) used greatest stack depth: 22480 bytes left 01:47:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a80016004000014002000006d67f6f94007134cf6efb0f40a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000002000000a4683e4f6d0200003f5aeb4eff0100000000000000360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace810500d6e4edef3d93452a92307f27260e970358337446d6e7006742ea86fc4ee4f1ac588b", 0xd8}], 0x1}, 0x0) [ 155.007610] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 01:47:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000006110600000000000c60000000080000095000000000000003e4f65c8cf0ef66890a16edf1ef1e8c05e4fe2755e7edb4435618773317bfab57b9f6a629f75a81c4ebe5337c86faf3233fdfb4af2299f72ffaa83c2ea68c1febe48ed0d3f9b319a91f753238e16f4b7cf61b22fed6eac2734f2ec04061f97b9f8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37a, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x4}, 0x10) close(r1) [ 155.052025] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.052064] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. 01:47:52 executing program 4: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 01:47:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4005}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="332907c210000100000000000000800000000000", @ANYRES32=r3], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x18}}, 0x0) 01:47:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xb001}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x4000000a, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000300)="0503d032c8003e0e01a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 01:47:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, r1, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE]}, 0x18}}, 0x0) [ 155.156356] IPv6: ADDRCONF(NETDEV_UP): veth9: link is not ready [ 155.164767] team0: Port device veth9 added [ 155.166185] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.166261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 01:47:52 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) 01:47:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x29, &(0x7f0000000000), 0x20a154cc) [ 155.166273] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.330131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.356000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 01:47:52 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000040)=0x22) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="900800002900fd"], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) r4 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x86ffde, 0x0) [ 155.563435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8374 comm=syz-executor.4 [ 155.563693] netlink: 2156 bytes leftover after parsing attributes in process `syz-executor.4'. 01:47:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 01:47:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 01:47:53 executing program 3: r0 = socket(0x1d, 0x2, 0x2) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) sendto$x25(r0, &(0x7f0000000200)="aac5dea90540b3f5c5d77ee674afcc49aea72d9cd6c2b811b2ceba8a066b14bcd90daa00d04b1ae064475ecc5e78e750e572815ccf6b71c2", 0x38, 0x0, &(0x7f0000000300)={0x9, @remote={[], 0x1}}, 0x7) 01:47:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x29}], 0x18}], 0x1, 0x0) 01:47:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3803"], 0x10) write(r1, &(0x7f0000000400)="360000001a51ed8ac7eb508e5df11999bc194c8b27d5a45c", 0x18) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:47:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 01:47:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x10012, r1, 0x0) ftruncate(r1, 0x400) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000000000)=""/174) 01:47:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x450, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x2}) [ 155.829711] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 01:47:53 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x43) 01:47:53 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r1, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='7', 0x1}]) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x6e00) 01:47:53 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x0, "d0a8ad14fae200b10abdd03a355dec83e76db8ab6069b70fc7e925a70f234022"}) 01:47:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x3c}, 0x1, 0x200000000000000}, 0x0) 01:47:53 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2}) 01:47:53 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x20841, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x7, 0x2}, 0x8) 01:47:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfffffff9}}]}]}]}, 0x3c}}, 0x0) [ 156.460925] bridge0: port 2(bridge_slave_1) entered disabled state 01:47:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x17, &(0x7f0000000080)={r2}, 0xc) 01:47:53 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000440)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x8800, &(0x7f0000000000)) [ 156.880938] device bridge_slave_1 left promiscuous mode [ 156.886452] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.912187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.926785] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 156.951717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:47:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0x0, 0x811e, &(0x7f0000000440)="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"}) 01:47:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0xffffffff, 0x0) 01:47:54 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) 01:47:54 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:47:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001731, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x0, 0x0, 0x38) 01:47:54 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}, {&(0x7f0000010200)="0000000000000000000000ffffffffffffffff", 0x13, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000500100000000000080000000000002000000000000000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000005d03ad81b0f54a0dab6e5049c81b610001000000000000000000d001000000005d03ad81b0f54a0dab6e5049c81b6100000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000005d03ad81b0f54a0dab6e5049c81b610001000000000000000000d001000000005d03ad81b0f54a0dab6e5049c81b61", 0xec, 0x10320}, {&(0x7f0000010400)="00000000000000000000000040d2010000000005000000000000000040500100000000050000000000000000c0d1010000000005000000000000000000d0010000000004000000000000000000d2010000000005000000000000000000d1010000000004000000000000000000000800000000000002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000020000000000000000001200000000000200000000000000008011000000000002000000000000000000110000000000010000000000000000c011000000000002000000000000000040110000000000010000000000000000000008000000000080010000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0500000000000030000000000000000001000000000000300000000000000008050000000000003000000000000000000510000000000030000000000000000405000000000000300000000000000004011000000000001000000000000000000000800000000008001000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d001000000000400000000000000000050010000000004000000000000000080d0010000000004000000000000000000d00100000000040000000000000000c0d0010000000004000000000000000000d1010000000004000000000000000000000800000000000002000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000004080)={[{@metadata_ratio={'metadata_ratio'}}, {@thread_pool={'thread_pool', 0x3d, 0xe687}}, {@noinode_cache='noinode_cache'}]}) 01:47:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 01:47:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x10a}]}) 01:47:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000002000)) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000200)=0x83) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x36, &(0x7f0000000100)=0xbaa) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x36, &(0x7f0000000100)=0xbaa) rt_tgsigqueueinfo(r2, r3, 0x10, &(0x7f0000000180)={0x20, 0x2, 0x9}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x9, 0x4) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 157.083230] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.116544] BTRFS: device fsid b07af5b6-36df-491d-894c-080d92d619ce devid 1 transid 5 /dev/loop0 01:47:54 executing program 2: mlock2(&(0x7f00006a1000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) [ 157.190403] BTRFS error (device loop0): unsupported checksum algorithm 1 [ 157.230174] IPVS: ftp: loaded support on port[0] = 21 01:47:54 executing program 4: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x83ce, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x3a05, 0xfff, 0x8, 0x4, 0x7, 0x0, 0x6}, 0x0, 0x200005, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x202002) ptrace$setopts(0x6, 0x0, 0x3, 0x42) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) personality(0x100005) fchdir(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100101, 0x0, @perf_bp={0x0, 0x2}, 0x4f000, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x33e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') semctl$GETVAL(0x0, 0x2, 0xc, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000500)=""/168, 0xa8}], 0x2, 0x4c00, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r2, 0x63, 0x0) [ 157.236846] BTRFS error (device loop0): superblock checksum mismatch [ 157.280951] BTRFS error (device loop0): open_ctree failed 01:47:54 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, &(0x7f0000000140), &(0x7f00000000c0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2, 0x0, &(0x7f0000000080)) [ 157.383523] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 157.399332] BTRFS error (device loop0): unsupported checksum algorithm 1 [ 157.410396] audit: type=1400 audit(1601084874.683:10): avc: denied { create } for pid=8529 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 157.417149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 157.434655] BTRFS error (device loop0): superblock checksum mismatch [ 157.451357] loop4: p2 < > 01:47:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="33000000180081ae08060c04000f000480207f03fe0400058701546f17000f0008000000b2336596bc014e18bbdfede6efb408", 0x33}], 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 157.483359] BTRFS error (device loop0): open_ctree failed 01:47:54 executing program 3: r0 = socket(0x22, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000180)) 01:47:54 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rt_sigtimedwait(&(0x7f0000000000)={[0xefb]}, &(0x7f0000000180), 0x0, 0x8) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 157.561193] IPVS: ftp: loaded support on port[0] = 21 01:47:54 executing program 1: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@lastblock={'lastblock'}}, {@anchor={'anchor', 0x3d, 0x4}}, {@longad='longad'}, {@novrs='novrs'}]}) [ 157.599558] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 157.630634] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 157.644215] loop4: p2 < > [ 157.695634] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 157.778016] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 157.786007] UDF-fs: Scanning with blocksize 512 failed [ 157.792614] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 157.804082] UDF-fs: Scanning with blocksize 1024 failed [ 157.817104] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 157.824430] UDF-fs: Scanning with blocksize 2048 failed [ 157.830502] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 157.837846] UDF-fs: Scanning with blocksize 4096 failed [ 157.843702] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 01:47:55 executing program 5: syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f004000000000000004000e00d0000200040000001e010000000000000502000000000000b901000000000000ed010000000000008f0000000000000041010000000000008b01000000000000a7010000000000001a73797a6b616c6c6572203a20001100001a73797a6b616c6c657220000000f3200011000073797a6b616c6c657273b0001d0200ed0100000100911d675f420100604d00ff40005a0000644d00114c002a8d00035d0171298e001a040d00145f000300ff278c004902006d09264c00000e2f746d702f73797a2d696d61676567656e3431393737363339322f66696c6530b500012986010200a0007d00294d00074d0009297d00055d0185ce040a002c010001296402dd03012aed00064d028fce0328232ced000229ec00ff000100c027ed0007dc046520544d1b085c001100004800130100a100034d00244c00090200040066696c65304800015002b2013104d404f7050200088003032e636f6c6486590201f906a64001ec080131e20005273100322a3100331100001a001200c10086dd0024dd0048dd00a6dd00e2de001e01bc001100008b0100000000000008805cf90100535f0100af010000000000001b001e00000600786174747231060000c401274d0032274d00321100000d001200c100024d00244c00110000c10100000000000001", 0x1f6}], 0x0, &(0x7f0000010200)) 01:47:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x40, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_DIVISOR={0x8}]}}]}, 0x40}}, 0x0) 01:47:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x18, r1, 0x4e559e2353b8c5d5, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 01:47:55 executing program 2: r0 = socket(0xa, 0x6, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x14, 0x0, 0x0) 01:47:55 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b452ab", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh], @ndisc_rs}}}}}, 0x0) 01:47:55 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x18, 0x0, &(0x7f0000001ffc)) 01:47:55 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000040000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0x9}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:47:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x11, 0x2, 0x0, "d0a8ad14fae200b10abdd03a355d0683e76db8ab6069b70fc7e925a70f104022"}) 01:47:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @rand_addr=0xfffffaf9}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) 01:47:55 executing program 3: unshare(0x6000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r0, 0x4, 0x0) [ 158.000752] SQUASHFS error: xz decompression failed, data probably corrupt 01:47:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x138, 0x17c, 0x17c, 0x138, 0x5, 0x238, 0x260, 0x260, 0x238, 0x260, 0x3, 0x0, {[{{@ipv6={@ipv4, @loopback, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0x118, 0x138, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@limit={{0x3c, 'limit\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) 01:47:55 executing program 3: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f0000000080)) [ 158.082064] SQUASHFS error: squashfs_read_data failed to read block 0x8f [ 158.103178] SQUASHFS error: Unable to read metadata cache entry [8f] [ 158.147398] SQUASHFS error: Unable to read inode 0x11e [ 158.227166] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 158.227434] SQUASHFS error: xz decompression failed, data probably corrupt [ 158.239385] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 158.244124] SQUASHFS error: squashfs_read_data failed to read block 0x8f [ 158.256323] loop4: p2 < > [ 158.256876] SQUASHFS error: Unable to read metadata cache entry [8f] [ 158.266168] SQUASHFS error: Unable to read inode 0x11e 01:47:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r1, 0x531, 0x0, 0x0, {{}, {}, {0x1ec0}}}, 0x30}}, 0x0) 01:47:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="9b247f9c17", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 01:47:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c00701ae236ebd7"]) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x81, 0x7}]}, 0xc, 0x5) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f00000004c0)='security.capability\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./bus/file0\x00') ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000900)={'trans=tcp,', {'port', 0x3d, 0x4}, 0x2c, {[{@mmap='mmap'}, {@access_uid={'access'}}, {@version_u='version=9p2000.u'}, {@access_client='access=client'}, {@noextend='noextend'}, {@noextend='noextend'}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_eq={'euid'}}]}}) 01:47:55 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) 01:47:55 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x54}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfddf) 01:47:55 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x6000, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 01:47:55 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="eb5f09dd62c0ce90855ecff064655537474022566a29a930e31a4ce54f1eddee2020290844766e207309b850f4635f4cc698b247486ebb31a52ee8162375737fcf859f7ac42f", 0x46}, {&(0x7f0000001980)="059b1984927c7207c4a879d632f0b3fb5bf733708d6a324896fc54d2eecd6945bad61f7f5c2fe895553f12ecce762a066f21f2b96e8109724a347ae290b287cf8dba786c31f562058f44ba795e71c16f27f161", 0x53}], 0x2}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 01:47:55 executing program 3: r0 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="24000000180007041dfffd946f610529802000001f040005000008000800050002000000", 0x24}], 0x1}, 0x0) [ 158.431803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.479366] overlayfs: filesystem on './bus' not supported as upperdir 01:47:56 executing program 0: r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80) 01:47:56 executing program 5: r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0) 01:47:56 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f00000002c0)='fuse\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x0, 0x0, 0x318032, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 01:47:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}]}}}]}, 0x40}}, 0x0) 01:47:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x10, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 01:47:56 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="eb5f09dd62c0ce90855ecff064655537474022566a29a930e31a4ce54f1eddee2020290844766e207309b850f4635f4cc698b247486ebb31a52ee8162375737fcf859f7ac42f", 0x46}, {&(0x7f0000001980)="059b1984927c7207c4a879d632f0b3fb5bf733708d6a324896fc54d2eecd6945bad61f7f5c2fe895553f12ecce762a066f21f2b96e8109724a347ae290b287cf8dba786c31f562058f44ba795e71c16f27f161", 0x53}], 0x2}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 01:47:56 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)='\x00', 0x1}, {&(0x7f0000000480)='\"', 0x1}], 0x2) 01:47:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x4, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x34a}, 0x48) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x4, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x34a}, 0x48) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x4, 0x0, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x34a}, 0x48) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000080)) close(r3) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="490000006f1ea6c0e4f81411c09dd5f0a26bd93e13f3167d9f80fda92838fa31d717a3474a73051d874dad2129f7791eea5917c069a75bbd739e547d9521a387797866c018a28a8b600c6ff7976cbfc4c7947fe5335c365368c5802c860ad92f56f42620", @ANYRES16=r5, @ANYBLOB="01000000000000000000090000000b0003800800010000000000140002006970766c616e310000000000000000003cff030000000000"], 0x3c}}, 0x0) shutdown(r4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) 01:47:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, 0x0}, 0x0) 01:47:56 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 158.995222] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 159.001910] audit: type=1401 audit(1601084876.283:11): op=fscreate invalid_context=22 [ 159.051268] overlayfs: filesystem on './bus' not supported as upperdir 01:47:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x4, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30) 01:47:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0x40, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x20}, 0x8) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x10, 0x4, 0x7}, 0x3}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x3a}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, r4, 0x7, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) 01:47:56 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x1}, 0x20) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r5}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@remote, @local, @private2={0xfc, 0x2, [], 0x1}, 0x4b72, 0x0, 0x3, 0x400, 0x9, 0x10000, r5}) 01:47:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xe844b383, &(0x7f00000006c0)={&(0x7f00000008c0)=@RTM_DELMDB={0xb8, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@dev, 0x86dd}}}, @MDBA_SET_ENTRY={0x1, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0xb8}}, 0x0) 01:47:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f0100e300e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x18, 0x2, [@TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x48}}, 0x0) 01:47:56 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 159.199329] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 01:47:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x8, 0x4) [ 159.255053] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 159.273777] loop4: p2 < > 01:47:56 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0xffffff5b, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "73f41100"}, 0x0, 0x0, @fd}) [ 159.309745] nla_parse: 3 callbacks suppressed [ 159.309755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:47:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x76, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x0, 0xd, [{}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200230374be10000000000010000020f9"]) 01:47:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:47:56 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500)="a7", 0x1}], 0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5452, &(0x7f00000004c0)={'vxcan1\x00'}) 01:47:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000037000505d23080648c63940d0224fc60100008400a000400030082c137153e3709070180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 159.433603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.502364] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 159.524542] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 01:47:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r0, &(0x7f0000000080)="0304003026fd573a00000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x2000fe02, 0x4000002, 0x0, 0x2ff) [ 159.572930] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.591857] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000004 data 0xf [ 159.612821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:47:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) 01:47:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) [ 159.621425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.651694] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.654675] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000000f data 0x9 [ 159.679995] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000009 data 0x1f [ 159.691397] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000001f data 0x13 [ 159.706473] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000013 data 0x3f [ 159.716881] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000003f data 0x27 01:47:57 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='bdev\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:47:57 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 01:47:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGWINSZ(r1, 0x5457, &(0x7f0000000140)) [ 159.727470] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000027 data 0x7f 01:47:57 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x20, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) [ 159.793949] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000007f data 0x4f 01:47:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1000000000000108, &(0x7f0000000a40)=[{&(0x7f0000000140)=""/31}, {&(0x7f0000000700)=""/89}, {&(0x7f0000000780)=""/129}, {&(0x7f0000000840)=""/148}, {&(0x7f0000001380)=""/4096, 0xffba}, {&(0x7f0000000900)=""/81}, {&(0x7f0000000980)=""/150}], 0x381, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 159.847459] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000004f data 0xff [ 159.932293] kvm [8749]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x4000003f data 0xff 01:47:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:47:57 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x13, &(0x7f0000000080), 0x20a15ab6) 01:47:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) 01:47:57 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000300)) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, 0x0, 0x200600) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x68) syz_open_procfs(r0, &(0x7f0000272000)) prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) [ 160.114136] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 160.139379] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 160.174044] loop4: p2 < > 01:47:57 executing program 1: mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x400000000005e831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x2e) [ 160.200671] audit: type=1400 audit(1601084877.493:12): avc: denied { sys_admin } for pid=8809 comm="syz-executor.4" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 160.293660] IPVS: ftp: loaded support on port[0] = 21 [ 160.459744] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 160.496578] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:47:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0xfffffff9, 0x0, 0xfffdffff}) 01:47:57 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @rand_addr=0xfffffaf9}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) 01:47:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xff, "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"}) 01:47:57 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2}, 0x8) [ 160.519845] loop4: p2 < > 01:47:57 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:57 executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x400) socket$unix(0x1, 0x1, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f00000001c0), 0x0) 01:47:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) 01:47:57 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x1, 0x1, [@remote]}, 0x14) 01:47:57 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 01:47:58 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x200, 0x20002) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 01:47:58 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1000000}]}}, &(0x7f0000000140)=""/135, 0x26, 0x87, 0x8}, 0x20) 01:47:58 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x0, 0xbb0b04b2dfd75153}, 0x10) 01:47:58 executing program 0: ioperm(0x0, 0x1, 0x100000000010000) ioperm(0xb4, 0x200, 0x0) 01:47:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@ldst={0x5, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 160.960053] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 160.969565] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 160.976720] loop4: p2 < > [ 161.018616] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 161.028188] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 161.035280] loop4: p2 < > [ 161.082450] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 161.091787] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 161.098996] loop4: p2 < > 01:47:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x58}}, 0x0) 01:47:58 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000140)={0x0, 0x34324d59, 0x0, 0x0, 0x0, @stepwise}) 01:47:58 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x14], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0100f0150100c1001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) 01:47:58 executing program 3: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a903000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000240)={[{@data_journal='data=journal'}]}) 01:47:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f00000000c0)=0x14) 01:47:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_MTU={0x8, 0x3, 0xd2f}]}, 0x3c}}, 0x0) 01:47:58 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff8}]}) [ 161.466497] Invalid UDP bearer configuration [ 161.466521] Enabling of bearer rejected, failed to enable media [ 161.489175] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 161.535030] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 161.545259] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.567178] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:47:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x1, 0x80, 0x400}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff}, 0xc) 01:47:58 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) [ 161.581064] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (40020008) [ 161.595263] loop4: p2 < > 01:47:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000034c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002480)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) 01:47:59 executing program 0: r0 = memfd_create(&(0x7f0000000280)='se\x00\x00\x00\x00\x00\xe5\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00', 0x6) pwrite64(r0, 0x0, 0x0, 0x0) 01:47:59 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "06ea2da6"}, 0x0, 0x0, @planes=0x0}) 01:47:59 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:59 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold='jqfmt=vfsold'}, {@balloc_test4='block-allocator=test4'}]}) 01:47:59 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="130000004e00817491bc655067d7aee4050c00", 0x13}], 0x1}, 0x0) [ 161.876103] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 161.886338] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 161.892366] loop4: p2 < > [ 161.928458] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 161.937921] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 161.944731] loop4: p2 < > [ 161.967833] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 161.981215] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 161.987581] loop4: p2 < > [ 162.024574] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 162.034013] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 162.040032] loop4: p2 < > 01:47:59 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x238, 0x0, 0x0) 01:47:59 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:47:59 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:59 executing program 3: bpf$OBJ_GET_PROG(0x22, &(0x7f0000000300)={0x0, 0x0, 0x1c}, 0x10) 01:47:59 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000040)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 01:47:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x3, r0}, 0x38) 01:47:59 executing program 3: setrlimit(0x2, &(0x7f0000000080)={0x0, 0x20080000003}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff01c, 0x3, 0x32, 0xffffffffffffffff, 0x0) 01:47:59 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:47:59 executing program 4: migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000040)=0x2) [ 162.294778] ntfs: (device loop0): parse_options(): The fmask option requires an argument. [ 162.316880] audit: type=1804 audit(1601084879.603:13): pid=9003 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir918556617/syzkaller.vz7tYw/34/bus" dev="sda1" ino=15859 res=1 01:47:59 executing program 3: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00006ef6cb503900000008150ee208d5fb00000000e2eaa8f6e4c6b26693727cdde1c05d8530907ba8da000000006799c20000b153049580c96161a9c01fcdfde3ccee3e5d2d94c7ce8cbddbd735b9d24ab423"], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 01:47:59 executing program 2: socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)) [ 162.385545] audit: type=1804 audit(1601084879.653:14): pid=9003 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir918556617/syzkaller.vz7tYw/34/bus" dev="sda1" ino=15859 res=1 01:47:59 executing program 1: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x1) 01:47:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) setregid(r1, 0xee01) [ 162.448591] ntfs: (device loop0): parse_options(): The fmask option requires an argument. [ 162.462266] audit: type=1804 audit(1601084879.663:15): pid=9003 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir918556617/syzkaller.vz7tYw/34/bus" dev="sda1" ino=15859 res=1 01:47:59 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:47:59 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000540)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') unlinkat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 162.540903] Invalid option length (764) for dns_resolver key [ 162.568282] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 01:47:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x3) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x2}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x6, "985f1dc2"}]}}}}}}}, 0x0) 01:47:59 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) [ 162.597221] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 162.626146] loop4: p2 < > 01:47:59 executing program 2: syz_emit_ethernet(0x52, &(0x7f00000003c0)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e00", 0x1c, 0x3a, 0x0, @remote={0xfe, 0x7e}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c05005a00640000070690780a010100e000000244142d7300000000ffffffffac1414aa000000038907567f000001000000000000000000000000000000000200004e2100004e24000000000000000400000001000000000000ab69f203ea9af3a885"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) 01:47:59 executing program 1: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492565, 0x3ec0) close(r0) 01:47:59 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) [ 162.655391] ntfs: (device loop0): parse_options(): The fmask option requires an argument. 01:48:00 executing program 4: setuid(0xee01) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 01:48:00 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@t={0x81, 0x6, 0x0, 0x0, @generic}) 01:48:00 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 2: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000fb0000000000090000000000000038"], 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 01:48:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x4606, 0x0) 01:48:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x2}}, 0x88}}, 0x0) 01:48:00 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x6, 0x0, &(0x7f0000000040)) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 162.879784] ntfs: (device loop0): parse_options(): The fmask option requires an argument. 01:48:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) dup3(r1, r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) r5 = dup(r4) getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0xc4) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 01:48:00 executing program 4: openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x38, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:48:00 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x2, 0x1}, 0x2c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000540)=r0, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 1: r0 = userfaultfd(0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) [ 163.065644] ntfs: (device loop0): parse_options(): The fmask option requires an argument. 01:48:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4, 0x11d}]}, 0x18}}, 0x0) 01:48:00 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000740)=0x80) signalfd(r1, &(0x7f0000000400), 0x8) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 0: syz_mount_image$ntfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:00 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000000800000076000000000000002700000000000000950000000000000027a6ba20848b63ffc1e089837c48b1908317f019c426188d9640c7b2ab12e73a4b18fb8cf052e74c538edef43639c936c90b8465735b688b1e967b1bcf06988c2c6c60711b175c5c26c9b5122f26c6f0bc0b0c6a406a232e4e6069037b2625b9a55102175b2fcb52e3f3fa51fa3862c5b7212c780d9ba3849abae3b2583403d193723d4df7f39765bbb08027586b069c3e12d02efdfe62d9d379547c4b4358cd773afa62053acd2a9689c0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="00803162c8a58044a95300000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 01:48:00 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000d5d000/0x1000)=nil, 0x16df8000, 0x0, 0x0, 0x0) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 01:48:00 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000000040)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1}}], 0x1, 0x0, 0x0) 01:48:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r5 = getpid() sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x4, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4, 0x7}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x34}}, 0x0) [ 163.290112] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 163.316671] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 0: syz_mount_image$ntfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 163.343939] mmap: syz-executor.3 (9136) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 163.349424] loop4: p2 < > [ 163.375939] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. 01:48:00 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 01:48:00 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r1, 0x0) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newtaction={0x30, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x1c, 0x1, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}, 0x30}}, 0x0) 01:48:00 executing program 0: syz_mount_image$ntfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0xfffffdb6) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) poll(0x0, 0x0, 0xffbffff9) dup2(r0, r1) 01:48:00 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x80000006}]}, 0x8) 01:48:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$inet(0x2, 0xa, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x1}], 0x2d, 0x3, 0x0) 01:48:00 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:00 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, 0x0, 0x0, 0x3, 0x0) [ 163.795008] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 163.805338] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 163.811761] loop4: p2 < > 01:48:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0xa, 0xa, 0x801}, 0x14}}, 0x0) 01:48:01 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, 0x0, 0x0, 0x3, 0x0) 01:48:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000a04fcff", 0x58}], 0x1) 01:48:01 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004403093"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:48:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f043}) 01:48:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x50}}, 0x0) 01:48:01 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, 0x0, 0x0, 0x3, 0x0) 01:48:01 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvfrom(r0, 0x0, 0x0, 0x160, 0x0, 0xff4d) 01:48:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) 01:48:01 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0), 0x0, 0x3, 0x0) 01:48:01 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8c44, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r0, &(0x7f0000000140)='-', 0x1) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:48:01 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f04e00", 0x10, 0x11, 0x0, @private1, @local, {[], {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x5865}}}}}}}}, 0x0) 01:48:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 164.477523] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 164.506390] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:48:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x47ffffe}], 0x1, 0x400fa7f, 0x0) 01:48:01 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0), 0x0, 0x3, 0x0) [ 164.522783] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.527686] loop4: p2 < > 01:48:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x42342, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = dup(r1) mmap$snddsp(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x0) 01:48:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 01:48:01 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0), 0x0, 0x3, 0x0) [ 164.640751] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:48:02 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 164.861812] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 164.960758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 164.973481] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 164.980142] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 164.988141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 164.997203] loop4: p2 < > 01:48:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) 01:48:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xc8f4, 0x0, 0x0, 0x800e00519) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) poll(&(0x7f00000000c0)=[{r2}, {r1}], 0x2, 0x200000) shutdown(r1, 0x0) 01:48:02 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x3, 0x0) 01:48:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x400004}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009040800000000000000050000000008000f00fffff000", 0x24) 01:48:02 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 01:48:02 executing program 4: unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x3f00}, 0x10) [ 165.031435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan2: link becomes ready 01:48:02 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x3, 0x0) 01:48:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000340)={{0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 01:48:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4076, 0xfec}], 0x2}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:48:02 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 01:48:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x6e, &(0x7f0000000380)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000240)="8b2a94199afa33", 0x7}]) 01:48:02 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x4000}) [ 165.274179] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 165.282344] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 165.298202] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 165.306659] loop4: p2 < > [ 165.320407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan3: link becomes ready 01:48:02 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x3, 0x0) 01:48:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@hoplimit_2292={{0x10}}], 0x10}}], 0x1, 0x0) 01:48:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) 01:48:03 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 01:48:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x1c3541, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x289010a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000580), &(0x7f00000005c0)=0x8) 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1, 0x3, 0x0) 01:48:03 executing program 3: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1, 0x3, 0x0) [ 166.059880] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:03 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}]}) 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1, 0x3, 0x0) 01:48:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x86030000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x4800}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040002", 0x1d, 0x8c80}, {&(0x7f0000012c00)="8081000000180000ddf4655fddf4655fddf4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014", 0x55, 0x8d00}], 0x0, &(0x7f0000013800)) 01:48:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107a00000000001e050000000000009500000000000000d33c53eebc03cdca776c9e8aa225b715f53220382d4272ce823408d595fb231521602b3c5febed4903c2a3093d8930869e8c82d597b5b9b0a6ca9632ba04000000000000046489fc8dba375a41256ad293e0d8f624b2129e49b4c206147324a3ab997dcfa09f4c233d63e78017942842b8edefd193aeb4a1926468a2e6c67e5aa7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 01:48:03 executing program 3: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 01:48:03 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) [ 166.191832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan4: link becomes ready 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c", 0x27}], 0x1, 0x3, 0x0) 01:48:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) [ 166.259389] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 166.292285] EXT4-fs warning (device loop2): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 166.321632] EXT4-fs (loop2): mount failed 01:48:03 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}]}) 01:48:03 executing program 3: ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x7ff) add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300), 0x0, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_IFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x48}}, 0x0) 01:48:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c", 0x27}], 0x1, 0x3, 0x0) 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c", 0x27}], 0x1, 0x3, 0x0) [ 166.412152] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 166.429192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 166.436496] loop4: p2 < > [ 166.439067] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 166.448556] EXT4-fs warning (device loop2): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 166.469330] batman_adv: Cannot find parent device [ 166.475410] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 166.477528] EXT4-fs (loop2): mount failed 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f800000000000000087", 0x3a}], 0x1, 0x3, 0x0) 01:48:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x4c}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 01:48:03 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}]}) 01:48:03 executing program 3: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = socket$key(0xf, 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="de440c29bba28a064a5466777a0df492", 0x10}]) 01:48:03 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f800000000000000087", 0x3a}], 0x1, 0x3, 0x0) 01:48:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) [ 166.639215] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 166.651947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan5: link becomes ready [ 166.734328] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 166.746380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.753926] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 166.761334] loop4: p2 < > [ 166.778699] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 166.819565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.845175] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 166.854005] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 01:48:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, 0x0) 01:48:04 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f800000000000000087", 0x3a}], 0x1, 0x3, 0x0) 01:48:04 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask'}}]}) 01:48:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff7}, {}, {0xe}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:48:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0xd}, {}]}]}}, &(0x7f0000000380)=""/245, 0x46, 0xf5, 0x1}, 0x20) 01:48:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x11) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 166.876392] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 166.892769] loop4: p2 < > 01:48:04 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x3}}) 01:48:04 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000640)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='msdos\x00', 0x0, 0x0) 01:48:04 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84", 0x44}], 0x1, 0x3, 0x0) [ 166.931713] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 166.947434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.960542] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 01:48:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000038000505d25a80648c2a940d0124fc6010020a400a000e00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 167.011761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:48:04 executing program 2: r0 = socket(0x23, 0x80002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 01:48:04 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask'}}]}) 01:48:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 01:48:04 executing program 4: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) 01:48:04 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84", 0x44}], 0x1, 0x3, 0x0) 01:48:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x48281, 0x0) io_setup(0x76, &(0x7f0000000340)=0x0) io_submit(r1, 0x2, &(0x7f0000000780)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x5a}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:48:04 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 167.187140] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.297336] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 167.331245] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 167.348230] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 167.355409] tmpfs: No value for mount option './bus' [ 167.357438] loop4: p2 < > [ 167.425245] IPv6: ADDRCONF(NETDEV_CHANGE): vcan6: link becomes ready [ 167.456992] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 01:48:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x11) 01:48:04 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask'}}]}) 01:48:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x0, 0x8, 0x40, 0x1}, 0x40) 01:48:04 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84", 0x44}], 0x1, 0x3, 0x0) 01:48:04 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0xf) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 01:48:04 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 167.470539] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:48:04 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b1", 0x49}], 0x1, 0x3, 0x0) [ 167.509267] loop4: p2 < > 01:48:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x3f}) 01:48:04 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)="7f49b6b64c6de85c374703cf", 0xc}, {&(0x7f0000000300)="a691a275b103b2651ab786b4d13bb859748bd1d793517214ca32324a8424f452e5d98458117b6fae8f45607ae30a25f5e7af00ee448efdc07aff6d8f815f76282dbf65afa5f6773e226ce775515b41c84084fc0bbd706d3032d7d9c98adb5aff3cf6b76cdea71b6b8cc117cf27801e2d41da09a1b9464cc324ce9da6daefe3588aaf47da45d969d8a7dfb936", 0x8c}, {&(0x7f00000003c0)="4908703fc24fe11a965e86cbe66994cbe61d326e9aee57234d1eeca65be4b09b940000000000010001ae99a46e876260113906c9da86e152285aa7b61413ce53f17bbc87dab65ceba7abe37639dfac4a9bf8a7c29ec2b8f40136834103657c86fe773c4ccb4175f6b4d61bbc44bcd2790164d62fa9fb77a2761571ff0f429a09f584b7f974335354ae292c553acaa547e1377ef4a534d85de9d415ca77ea94676b7c96b6857be784780a719cda9146b275b59eb2af35907df5c545b1cc4019150658c476752c4c176f467aaefbf1590562cf9e131d97b5d0e6296f9eecc3b85c5604ac5110b8e87a3bb9c375ec36000000", 0xf1}, {&(0x7f00000004c0)="2614434e0836bd288024650a9f9ef6676b0d68a065b614dbb22c4e54c90b6a7a36edf206af1c831b6c11aae8b656b3f876f7b757b4e527357606ca5957e95266690c", 0x42}], 0x4) [ 167.547665] __ntfs_error: 2 callbacks suppressed [ 167.547676] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 167.568148] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:04 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:04 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b1", 0x49}], 0x1, 0x3, 0x0) [ 167.615399] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 01:48:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) [ 167.786544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan7: link becomes ready 01:48:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:05 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b1", 0x49}], 0x1, 0x3, 0x0) 01:48:05 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:05 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 30000000000000000063'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 01:48:05 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:05 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = socket(0x25, 0x5, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", ""]}, 0x14}}, 0x3f7c0ddfe147321c) sched_getscheduler(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1a}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, 0x64}}, 0x18000) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00c30"}}}}, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000300000000000000bc0000000000000003000000000000000000010000000000000000000000000000000000000000000000000000000000020000001f000000eced501700000000040000000000000004000000000000006936d2350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe200000000"]) r3 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) socket$inet6(0xa, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 167.892202] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 167.916185] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:48:05 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 01:48:05 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209", 0x4b}], 0x1, 0x3, 0x0) [ 167.941324] loop4: p2 < > [ 167.948183] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 167.965437] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 01:48:05 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 01:48:05 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:05 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209", 0x4b}], 0x1, 0x3, 0x0) 01:48:05 executing program 4: r0 = memfd_create(&(0x7f0000000640)='\xbb\x02\t=\xa0\x9dY\xba-\xcf\x8e\xb1\x91^\x00\x00\x01\x06\x00\x00\x00\x00\x00\xfa\xe3\xa0\xf9=\xfa\xe8HB\xf7\x92\x00'/50, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000740)="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", 0x8c1}, {0x0}, {&(0x7f00000004c0)="d4", 0x1}], 0x3, 0x0, 0x0) [ 168.118713] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 168.137496] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 168.182028] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 168.190517] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 168.235802] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 168.241038] loop4: p2 < > [ 168.391495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan8: link becomes ready [ 168.473579] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 168.484377] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 168.490561] loop4: p2 < > 01:48:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:06 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 01:48:06 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209", 0x4b}], 0x1, 0x3, 0x0) 01:48:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x254, 0x5802, 0x294, 0x700, 0x294, 0x338, 0x378, 0x378, 0x338, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x98, 0x0, 0xd, 0x0, 0x6c], [], @dev}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'macvtap0\x00', 'vlan1\x00'}, 0x0, 0x22c, 0x254, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'gre0\x00'}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x45c) 01:48:06 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:06 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = socket(0x25, 0x5, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", ""]}, 0x14}}, 0x3f7c0ddfe147321c) sched_getscheduler(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1a}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, 0x64}}, 0x18000) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00c30"}}}}, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000300000000000000bc0000000000000003000000000000000000010000000000000000000000000000000000000000000000000000000000020000001f000000eced501700000000040000000000000004000000000000006936d2350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe200000000"]) r3 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) socket$inet6(0xa, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:48:06 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b1720946", 0x4c}], 0x1, 0x3, 0x0) 01:48:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = socket(0x25, 0x5, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", ""]}, 0x14}}, 0x3f7c0ddfe147321c) sched_getscheduler(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1a}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, 0x64}}, 0x18000) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00c30"}}}}, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000300000000000000bc0000000000000003000000000000000000010000000000000000000000000000000000000000000000000000000000020000001f000000eced501700000000040000000000000004000000000000006936d2350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe200000000"]) r3 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) socket$inet6(0xa, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 168.850231] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 168.860819] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 01:48:06 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 01:48:06 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:06 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b1720946", 0x4c}], 0x1, 0x3, 0x0) 01:48:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:06 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b1720946", 0x4c}], 0x1, 0x3, 0x0) 01:48:06 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 169.120819] ntfs: (device loop0): parse_options(): Unrecognized mount option . 01:48:06 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:06 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x4d}], 0x1, 0x0, 0x0) 01:48:06 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 169.349111] ntfs: (device loop0): parse_options(): Unrecognized mount option . 01:48:07 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = socket(0x25, 0x5, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", ""]}, 0x14}}, 0x3f7c0ddfe147321c) sched_getscheduler(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1a}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, 0x64}}, 0x18000) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00c30"}}}}, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000300000000000000bc0000000000000003000000000000000000010000000000000000000000000000000000000000000000000000000000020000001f000000eced501700000000040000000000000004000000000000006936d2350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe200000000"]) r3 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) socket$inet6(0xa, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:48:07 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x4d}], 0x1, 0x0, 0x0) 01:48:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 01:48:07 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:07 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:07 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x0, [0x20000100, 0x0, 0x0, 0x2000021e, 0x2000024e], 0x0, 0x0, 0x0}, 0x422) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x42002, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a087fe9ab94f27371cc807008505f3d009c9219d8e0d2b380cb2f17298dbc192d2d886feae846c9ad4205d839038f29a6f8000000000000000871a8f58b7174cb1670e84fe70c598b17209465b", 0x4d}], 0x1, 0x0, 0x0) [ 169.892937] ================================================================================ [ 169.901741] UBSAN: Undefined behaviour in net/netfilter/ipset/ip_set_hash_gen.h:125:6 [ 169.909713] shift exponent 32 is too large for 32-bit type 'unsigned int' [ 169.916644] CPU: 1 PID: 9700 Comm: syz-executor.4 Not tainted 4.19.147-syzkaller #0 [ 169.924439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.933792] Call Trace: [ 169.936384] dump_stack+0x22c/0x33e [ 169.940020] ubsan_epilogue+0xe/0x3a [ 169.943739] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 169.949890] ? hash_ipportip_create+0x366/0xa4d [ 169.954561] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 169.959584] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 169.964438] hash_ipportip_create.cold+0x1a/0x21 [ 169.969195] ? hash_ipportip4_add+0x2050/0x2050 [ 169.973865] ip_set_create+0x70e/0x1380 [ 169.977845] ? __find_set_type_get+0x450/0x450 [ 169.982450] ? lock_downgrade+0x750/0x750 [ 169.986610] ? __find_set_type_get+0x450/0x450 [ 169.991199] nfnetlink_rcv_msg+0xeff/0x1210 [ 169.995536] ? nfnetlink_net_init+0x170/0x170 [ 170.000044] ? avc_has_extended_perms+0x1020/0x1020 [ 170.005061] ? avc_has_extended_perms+0x1020/0x1020 [ 170.010079] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 170.014593] ? lock_downgrade+0x750/0x750 [ 170.018742] ? __local_bh_enable_ip+0x159/0x2a0 [ 170.023421] ? cred_has_capability+0x162/0x2e0 [ 170.028012] ? cred_has_capability+0x1d9/0x2e0 [ 170.032603] ? selinux_inode_copy_up+0x180/0x180 [ 170.037358] ? selinux_inode_copy_up+0x180/0x180 [ 170.042119] netlink_rcv_skb+0x160/0x440 [ 170.042139] ? nfnetlink_net_init+0x170/0x170 [ 170.042157] ? netlink_ack+0xae0/0xae0 [ 170.054681] ? ns_capable_common+0x117/0x140 [ 170.059101] nfnetlink_rcv+0x1b2/0x41b [ 170.062997] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 170.067770] netlink_unicast+0x4d5/0x690 [ 170.071845] ? netlink_sendskb+0x110/0x110 [ 170.076095] netlink_sendmsg+0x717/0xcc0 [ 170.080168] ? nlmsg_notify+0x1a0/0x1a0 [ 170.084137] ? __sock_recv_ts_and_drops+0x540/0x540 [ 170.089189] ? nlmsg_notify+0x1a0/0x1a0 [ 170.093144] sock_sendmsg+0xc7/0x130 [ 170.096839] ___sys_sendmsg+0x7bb/0x8f0 [ 170.100797] ? copy_msghdr_from_user+0x440/0x440 [ 170.105550] ? find_held_lock+0x2d/0x110 [ 170.109604] ? __fget+0x386/0x570 [ 170.113043] ? lock_downgrade+0x750/0x750 [ 170.117172] ? check_preemption_disabled+0x41/0x2b0 [ 170.122174] ? __fget+0x3ad/0x570 [ 170.125624] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 170.129839] ? lock_acquire+0x170/0x3f0 [ 170.133796] ? __might_fault+0xef/0x1d0 [ 170.137767] ? __fget_light+0x1d1/0x230 [ 170.141734] __x64_sys_sendmsg+0x132/0x220 [ 170.145949] ? __sys_sendmsg+0x1b0/0x1b0 [ 170.150015] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 170.154765] ? trace_hardirqs_off_caller+0x69/0x210 [ 170.159760] ? do_syscall_64+0x21/0x670 [ 170.163716] do_syscall_64+0xf9/0x670 [ 170.167498] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.172666] RIP: 0033:0x45e179 [ 170.175838] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.194717] RSP: 002b:00007fdb8f209c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.202446] RAX: ffffffffffffffda RBX: 0000000000029b40 RCX: 000000000045e179 [ 170.209697] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 170.216947] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 170.224193] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 170.231444] R13: 00007ffcf08dc4df R14: 00007fdb8f20a9c0 R15: 000000000118cf4c 01:48:07 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 170.238740] ================================================================================ 01:48:07 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 170.276508] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 170.309908] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}]}) 01:48:07 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) [ 170.332683] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 170.363082] loop4: p2 < > 01:48:07 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:07 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f00000006c0)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) [ 170.498228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan9: link becomes ready 01:48:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:07 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) [ 170.550256] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns 01:48:07 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'rose0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) ioctl$sock_netdev_private(r0, 0x8b2c, &(0x7f0000000000)) 01:48:07 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 01:48:07 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) [ 170.657600] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 170.878273] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 170.899881] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 170.901906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan10: link becomes ready [ 170.919451] loop4: p2 < > 01:48:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 01:48:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:08 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 01:48:08 executing program 4: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000100)="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", 0x401, 0xfffffffffffffffd) 01:48:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 171.031009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:48:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x16, &(0x7f0000000140), 0x4) 01:48:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 01:48:08 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x2f, 0x0, &(0x7f0000001800)) [ 171.130837] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:08 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f00000001c0)="240000001e005f02146c4afffff807000000000000000000000008130500090000b70d00", 0x24) 01:48:08 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x13, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000019580)=0xfffffffffffffc93) 01:48:08 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) [ 171.421071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan11: link becomes ready [ 171.438729] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 171.449176] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:48:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$inet6(0xa, 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 01:48:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_OPERSTATE={0x5, 0x3, 0x3a}]}, 0x48}}, 0x0) 01:48:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdee}, 0x48) [ 171.471884] loop4: p2 < > 01:48:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0}) 01:48:08 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_stats}) [ 171.671811] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 171.691613] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:09 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 01:48:09 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) [ 171.735472] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 171.743639] loop4: p2 < > [ 171.816703] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 171.828431] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 171.849370] loop4: p2 < > 01:48:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:09 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 171.917097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan12: link becomes ready [ 171.996721] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 172.020590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan13: link becomes ready 01:48:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x89}, 0x20) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) openat$full(0xffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000002c0)=@secondary='builtin_and_secondary_trusted\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') open(&(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:48:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 01:48:11 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xe) 01:48:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:11 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 174.518223] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 174.526774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=106 sclass=netlink_route_socket pid=9923 comm=syz-executor.2 [ 174.546943] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 174.557612] __ntfs_error: 19 callbacks suppressed 01:48:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8) 01:48:11 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:11 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x71}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000200)='./file0\x00', 0x200) [ 174.557624] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 174.569138] loop4: p2 < > [ 174.587418] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:11 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 174.671363] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:48:12 executing program 4: r0 = socket(0x100001400000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f97407010904000200071008000100010000000800800000000000", 0x54a) [ 174.733875] FAT-fs (loop2): mounting with "discard" option, but the device does not support discard 01:48:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x2, 0x0, 0x201a7fa6, 0x5}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) 01:48:12 executing program 5: r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x3, 0xffffffffffffffff, 0x0) 01:48:12 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0x0, 0xee01) ioctl$TCGETX(r0, 0x4b60, 0x0) [ 174.806175] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 174.826738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan14: link becomes ready 01:48:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:12 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@umask={'umask'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:12 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:12 executing program 4: r0 = socket(0x2, 0x1, 0x0) close(r0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 01:48:12 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="ff00005383639d000000000000002ec397af675867ff0c82a8de18"], 0x30}}, 0x0) [ 174.984886] ntfs: (device loop0): parse_options(): Unrecognized mount option . 01:48:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000507d25a80648c63940d0324fc6010000a4002000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 175.062973] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 175.077778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9992 comm=syz-executor.5 [ 175.082253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9996 comm=syz-executor.5 01:48:12 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xf4, 0x0, 0x1bc, 0x0, 0xf4, 0x284, 0x284, 0x284, 0x284, 0x284, 0x4, 0x0, {[{{@ipv6={@loopback, @ipv4={[], [], @local}, [], [], 'macvtap0\x00', 'caif0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x1bc}}, {{@ipv6={@loopback, @mcast2}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) 01:48:12 executing program 4: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x6c4, &(0x7f00000000c0)=[@mss], 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000080), &(0x7f0000005500)=0x49) 01:48:12 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 175.100341] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 01:48:12 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000011003586000000030080000007000099", @ANYRES32=r1, @ANYBLOB="000000e9000000000c001a"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 01:48:12 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r1, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev}}, 0x4c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 175.167255] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 175.178179] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 175.204767] loop4: p2 < > [ 175.233018] audit: type=1804 audit(1601084892.523:16): pid=10009 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir313247462/syzkaller.EvhikJ/79/bus" dev="sda1" ino=15954 res=1 [ 175.277556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan15: link becomes ready [ 175.370670] audit: type=1800 audit(1601084892.653:17): pid=10022 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15871 res=0 01:48:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:12 executing program 2: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8914, &(0x7f0000000000)={'macvtap0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "a6d142dc40d208830e493f7f2e2d7f49fac608b362938039f867c261e2e4843032ea2ff5d58bd6e2ea289f7ddc21761ed9663902603879e6c6e0386d5e6e23d244a1fab18abaa869e6d0ca91ea09bc75"}, 0xd8) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1df8, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0x75011080, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x29ba}, 0x100) 01:48:12 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) 01:48:12 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x63c96def441c7128}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x4}) 01:48:12 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 175.439596] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 175.449302] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 175.457339] loop4: p2 < > [ 175.489009] device veth0_macvtap left promiscuous mode [ 175.512547] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 175.515458] audit: type=1804 audit(1601084892.803:18): pid=10039 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir313247462/syzkaller.EvhikJ/80/bus" dev="sda1" ino=15953 res=1 01:48:12 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) epoll_create1(0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r1, &(0x7f0000000100)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001100)) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 01:48:12 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:13 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 175.711929] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 175.733103] audit: type=1804 audit(1601084893.023:19): pid=10059 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir313247462/syzkaller.EvhikJ/81/bus" dev="sda1" ino=15962 res=1 01:48:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:13 executing program 3: chdir(0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) [ 175.948817] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 176.018332] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 176.034965] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 176.044507] loop4: p2 < > [ 176.081748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan16: link becomes ready 01:48:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 176.236279] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:13 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x10a0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:48:13 executing program 3: chdir(0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x1d}]}, 0x24}}, 0x0) 01:48:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask'}}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@fmask={'fmask'}}]}) 01:48:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 176.440705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan17: link becomes ready [ 176.452274] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.475974] netlink: 3092 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.492775] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 176.504862] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 01:48:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x705, 0x0, 0x9000000, {0x0, 0x0, 0x0, 0x0, 0x3f6e530e5428ee56}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}]}, 0x60}}, 0x0) 01:48:13 executing program 3: chdir(0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\a\bk9'}, 0x0, 0x0, @planes=0x0}) [ 176.556332] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 176.603380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan18: link becomes ready [ 176.633478] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 01:48:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x74d7b3be, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/250, 0x39, 0xfa, 0x8}, 0x20) 01:48:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 176.648814] netlink: 3092 bytes leftover after parsing attributes in process `syz-executor.2'. 01:48:14 executing program 5: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={'crc32\x00'}}) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r2}, &(0x7f0000000240)=""/248, 0xf8, &(0x7f0000000380)={&(0x7f0000000000)={'md5-generic\x00'}}) 01:48:14 executing program 0: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack_expect\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r2, 0x536ae464467e3929, 0x0, 0x0, {0x25, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x2}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) fstat(r0, 0x0) [ 176.732309] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 176.770724] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:14 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf}, 0x40) 01:48:14 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) [ 176.799605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.806168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan19: link becomes ready [ 176.814596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:48:14 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:14 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe9, &(0x7f0000000140), &(0x7f00000000c0)=0x4) [ 176.868536] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 01:48:14 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x50, r1, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) 01:48:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0xfd78}, {0x0}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) mknod(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) [ 177.021812] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 01:48:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@nl, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)="4201193b90eaa42d6b785429f39d0a9f", 0x10}], 0x1, &(0x7f0000001540)=[{0xc}], 0xc}, 0x0) 01:48:14 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:14 executing program 4: setrlimit(0x7, &(0x7f0000000140)) socket$pppl2tp(0x18, 0x1, 0x1) [ 177.064071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan20: link becomes ready 01:48:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0xfd78}, {0x0}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) mknod(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) [ 177.178949] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 177.207040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan21: link becomes ready [ 177.220583] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 177.231397] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 177.253752] loop4: p2 < > [ 177.371453] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 177.380812] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 177.387121] loop4: p2 < > [ 177.449414] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 177.459237] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 177.466552] loop4: p2 < > 01:48:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@ipv4={[], [], @local}}, 0x14) 01:48:15 executing program 0: unshare(0x20000400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f0000000200)='T', 0x1}, {&(0x7f0000000400)='\r', 0x1}], 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 01:48:15 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="60d1cd7ef35fea000000000000000000ce75d100d5dba9759375e6f7bc2d805182", 0x21) 01:48:15 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180), 0x8) 01:48:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124a00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000560600000fff07006706000002000000070600000ee60000bf250000000000006b350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b7a800"/196], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 177.805066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan22: link becomes ready 01:48:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}}, 0x1c}}, 0x0) 01:48:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x5, 0x7, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x5500, 0x11, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1d000000}, 0x40) 01:48:15 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc040564a, &(0x7f0000000280)={0x0, 0x0, 0x300f}) 01:48:15 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:15 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$can_bcm(0x1d, 0x2, 0x2) [ 177.957937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan23: link becomes ready 01:48:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:15 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) 01:48:15 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0xd) prctl$PR_GET_SECUREBITS(0x1b) 01:48:15 executing program 4: syz_emit_ethernet(0xe, &(0x7f00000006c0)={@random="8b474fc30be2", @random="9568fe0bd0f8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "dcc400", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x0, 0x0, @mcast1, @dev, [@fragment, @hopopts]}}}}}}}, 0x0) 01:48:15 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "e57d92", "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"}}, 0x110) 01:48:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) remap_file_pages(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) [ 178.103435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan24: link becomes ready 01:48:15 executing program 4: openat$thread_pidfd(0xffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 01:48:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[], 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000100000001"], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) 01:48:15 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x48) [ 178.244946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan25: link becomes ready 01:48:15 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x300000c, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3d, 0x0, &(0x7f0000013000)) 01:48:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:15 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40085112, &(0x7f0000000000)) [ 178.291588] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 178.320060] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 01:48:15 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 178.347313] loop4: p2 < > 01:48:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000010401021800000000000000000002"], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) 01:48:15 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d008800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) 01:48:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000980)="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", 0x48c, r0) [ 178.400727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan26: link becomes ready [ 178.437956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:48:15 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 178.520254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.589060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan27: link becomes ready [ 178.629968] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 178.639420] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.648481] loop4: p2 < > [ 178.671058] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 178.680457] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.687125] loop4: p2 < > 01:48:16 executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6074dc380028210020010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 01:48:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='map=normal,map=o']) 01:48:16 executing program 5: r0 = socket(0x1e, 0x2, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name, 0x10) dup2(r0, r1) 01:48:16 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x18, r0, 0x703, 0x0, 0x0, {0xf}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 01:48:16 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:16 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 01:48:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x4}, 0x6) [ 179.145822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan28: link becomes ready [ 179.146534] dccp_invalid_packet: P.Data Offset(0) too small [ 179.178998] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 01:48:16 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 179.207692] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 179.217484] dccp_invalid_packet: P.Data Offset(0) too small [ 179.235605] loop4: p2 < > 01:48:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 01:48:16 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS1(r0, 0x40047452, 0x0) 01:48:16 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) 01:48:16 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xb4, 0xb4, 0xb4, 0x18c, 0x18c, 0x18c, 0x18c, 0x18c, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x94, 0xb4, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x27c) 01:48:16 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0xb40) read(r0, &(0x7f0000000480)=""/255, 0xff) [ 179.321572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan29: link becomes ready 01:48:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 01:48:16 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}}, 0x0) 01:48:16 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) unshare(0x2000400) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x2) 01:48:16 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3cb}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 01:48:16 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0) [ 179.569062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan30: link becomes ready 01:48:16 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xffffff85}, 0x1}, 0x6d) 01:48:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 179.685516] kauditd_printk_skb: 16 callbacks suppressed [ 179.685529] audit: type=1804 audit(1601084896.973:33): pid=10405 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir313247462/syzkaller.EvhikJ/98/bus" dev="sda1" ino=15993 res=1 [ 179.843166] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 179.864032] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 179.870322] loop4: p2 < >