[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 47.151475][ T6633] scp (6633) used greatest stack depth: 21664 bytes left [ 49.602341][ T4819] systemd-udevd (4819) used greatest stack depth: 21520 bytes left Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. 2020/06/25 10:30:18 fuzzer started 2020/06/25 10:30:19 dialing manager at 10.128.0.26:40211 2020/06/25 10:30:19 syscalls: 3105 2020/06/25 10:30:19 code coverage: enabled 2020/06/25 10:30:19 comparison tracing: enabled 2020/06/25 10:30:19 extra coverage: enabled 2020/06/25 10:30:19 setuid sandbox: enabled 2020/06/25 10:30:19 namespace sandbox: enabled 2020/06/25 10:30:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/25 10:30:19 fault injection: enabled 2020/06/25 10:30:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/25 10:30:19 net packet injection: enabled 2020/06/25 10:30:19 net device setup: enabled 2020/06/25 10:30:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/25 10:30:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/25 10:30:19 USB emulation: enabled 10:31:35 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@remote, 0x45}) pipe2$9p(&(0x7f0000000080), 0x80000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x402000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x841, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000200)={0x66, &(0x7f0000000180)=""/102}) userfaultfd(0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, r3, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x4008880) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000580)={0x7, 0x0, 0x68321b11, 0x4}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ocfs2_control\x00', 0x440080, 0x0) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ppoll(&(0x7f0000000780)=[{r8}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2188}, {0xffffffffffffffff, 0x11240}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4004}, {0xffffffffffffffff, 0x5000}, {0xffffffffffffffff, 0x2000}], 0x8, &(0x7f00000007c0)={0x0, 0x989680}, &(0x7f0000000800)={[0xfffffffffffffffa]}, 0x8) [ 131.374831][ T6808] IPVS: ftp: loaded support on port[0] = 21 10:31:35 executing program 1: llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/172, 0xac) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80900, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x1000, {0x7, 0x8, 0x6, 0x26e9, 0x6, 0x81}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000001c0)=0x7f) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x40000) recvfrom(r3, &(0x7f0000000300)=""/91, 0x5b, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000380)={0x2, 0x0, 0x2, 0x1}) r4 = accept4(r1, 0x0, &(0x7f00000003c0), 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000400)=0x101000, 0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x900, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000480)=0x1, 0x4) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000004c0)={0x3, 0x32314742, 0x2, @stepwise={0xffffffff, 0x6, 0x10001, 0x4effdcce, 0x200, 0x10000}}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000540)='/dev/input/mice\x00', 0x2000) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f0000000580)=""/202) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000700)={0xfffffff, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x990a72, 0x1, [], @p_u32=&(0x7f0000000680)=0x81}}) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x612a}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) [ 131.515752][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 131.641815][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.649139][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.658011][ T6808] device bridge_slave_0 entered promiscuous mode [ 131.669461][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.676604][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.686338][ T6808] device bridge_slave_1 entered promiscuous mode [ 131.715889][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.730325][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.785870][ T6946] IPVS: ftp: loaded support on port[0] = 21 [ 131.793522][ T6808] team0: Port device team_slave_0 added [ 131.810784][ T6808] team0: Port device team_slave_1 added 10:31:36 executing program 2: ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='autogroup\x00') setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000004c0)=0x2, 0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000500)={0x800, 0x2, 0x81, 0xa53d, 0x4, 0x401}) socket$pppoe(0x18, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000680)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'veth0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f00000009c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x158, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4090}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x7fffffff, "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", 0x3, 0x81, 0x6, 0x65, 0x1e, 0x3, 0x2e}}}, 0x120) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000d40)=0xa2, &(0x7f0000000d80)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x4e24, @broadcast}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/sequencer2\x00', 0x10140, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000e40)='security.evm\x00', &(0x7f0000000e80)=@ng={0x4, 0x11, 'M'}, 0x3, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000ec0)=0x1, 0x4) set_robust_list(&(0x7f0000001000)={&(0x7f0000000f40)={&(0x7f0000000f00)}, 0x9a48, &(0x7f0000000fc0)={&(0x7f0000000f80)}}, 0x18) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 131.866770][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.875424][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.903093][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.927800][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.938192][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.966281][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.116847][ T6808] device hsr_slave_0 entered promiscuous mode 10:31:36 executing program 3: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x301600, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=r0, 0x1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/user\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2c0301, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000200)={0x0, 0x5, 0x9c15}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="a224ed2414e72200e88453881e627f", 0xf, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0xa000000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x400c40, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x81) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f00000003c0)={0x1}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() r9 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getgroups(0x8, &(0x7f0000000580)=[r2, r7, r8, r9, r2, r2, r10, r2]) [ 132.160722][ T6808] device hsr_slave_1 entered promiscuous mode [ 132.277298][ T7033] IPVS: ftp: loaded support on port[0] = 21 [ 132.280286][ T6946] chnl_net:caif_netlink_parms(): no params data found [ 132.488552][ T7105] IPVS: ftp: loaded support on port[0] = 21 [ 132.614560][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.625960][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.635539][ T6946] device bridge_slave_0 entered promiscuous mode 10:31:37 executing program 4: io_uring_setup(0xefd, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x1, 0x10c}) r0 = socket(0xf, 0x6, 0x9) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0xdb2, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x4e21, @private=0xa010102}}}, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x58f080, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000200)={0xa5ed, &(0x7f00000001c0)}) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x13806, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000500)=[{&(0x7f0000000300)="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", 0xfd, 0xfff}, {&(0x7f0000000400)="13657d7e850f2e05cc07d2fbd6fdfff59ffb12a48549a825c654c8f327ebe40910fc8de84165cf15087be28ecdcf2874dd6498b7780df68f2854c7176c78d1cb6e9ade3cc4254c26941a686766f02b2f2fda5f0a497c80c1c93219212fe39baa8cc254230ca144603af64db52d4025cecfe4cfa10bd4da58e0c9da2df3e773d571ec574364fed5c5a00438287dd5c865e7428add2564aaa4b6a1043835adc14a4fd9a0b87658631fb1c5c03521c44ca6cd749acf12fd0a77bc98f85d5f11686dc000c8c74ea3bd82c674770fbc3a67ce9a3f0db948344fc37172d8c292150923cfe251f9de4fa60f8bb886e5e7328e65649c55ca", 0xf4, 0x9}], 0x2010, &(0x7f0000000680)={[{@fat=@fmask={'fmask', 0x3d, 0x9}}], [{@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@uid_gt={'uid>', r3}}]}) syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x7ff, 0x82040) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000740)=""/34, 0x22, 0x9, 0xd3cf, 0x1, 0x7f, 0x5}}, 0x120) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000900)={0xeddb, 0x5, [{0xc}, {0xd}, {0x4, 0x1}, {0x1, 0x1}, {0xb}]}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r5 = semget(0x1, 0x0, 0x8) semctl$GETVAL(r5, 0x1, 0xc, &(0x7f0000000940)=""/75) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x90c00, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) [ 132.702357][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.709822][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.718219][ T6946] device bridge_slave_1 entered promiscuous mode [ 132.772201][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 132.868609][ T6946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.925313][ T6946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.948141][ T6808] netdevsim netdevsim0 netdevsim0: renamed from eth0 10:31:37 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x402000, 0x0) r0 = socket(0x3, 0x800, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8144154}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004805}, 0x4c882) init_module(&(0x7f00000001c0)='/dev/vcs#\x00', 0xa, &(0x7f0000000200)='/dev/mixer\x00') ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000240)) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080b0}, 0x24040000) r3 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000400)=""/161) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20ncci\x00', 0x38002, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000500)={0x0, 0x6000, 0xffffffffffff8000, 0x4, 0x12}) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$l2tp6(r5, &(0x7f0000000540)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, [], 0x1}, 0x5}, 0x20) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x13, r5, 0x6) lsetxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000600)='y\x00', 0x2, 0x2) r6 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x8001, 0x2) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x44) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000800)={'veth1_macvtap\x00', {0x2a, 0xffffffff, 0x7ffe}}) [ 133.024831][ T6808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.156154][ T7288] IPVS: ftp: loaded support on port[0] = 21 [ 133.175087][ T6808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.228702][ T6946] team0: Port device team_slave_0 added [ 133.238457][ T6946] team0: Port device team_slave_1 added [ 133.267432][ T6808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.281910][ T7312] IPVS: ftp: loaded support on port[0] = 21 [ 133.379052][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.386143][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.403199][ T7033] device bridge_slave_0 entered promiscuous mode [ 133.414785][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.423186][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.433447][ T7033] device bridge_slave_1 entered promiscuous mode [ 133.458832][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.472559][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.482251][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.508436][ T6946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.523349][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.530708][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.557810][ T6946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.576469][ T7105] chnl_net:caif_netlink_parms(): no params data found [ 133.588331][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.713260][ T6946] device hsr_slave_0 entered promiscuous mode [ 133.769718][ T6946] device hsr_slave_1 entered promiscuous mode [ 133.839180][ T6946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.847003][ T6946] Cannot create hsr debugfs directory [ 133.859545][ T7033] team0: Port device team_slave_0 added [ 133.899869][ T7033] team0: Port device team_slave_1 added [ 133.964441][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.972012][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.998668][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.053690][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.064624][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.092456][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.117599][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.125813][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.133975][ T7105] device bridge_slave_0 entered promiscuous mode [ 134.217917][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.227528][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.236228][ T7105] device bridge_slave_1 entered promiscuous mode [ 134.325570][ T7033] device hsr_slave_0 entered promiscuous mode [ 134.370199][ T7033] device hsr_slave_1 entered promiscuous mode [ 134.429183][ T7033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.436826][ T7033] Cannot create hsr debugfs directory [ 134.448511][ T7105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.466137][ T7105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.482731][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 134.492766][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 134.564395][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.579747][ T7105] team0: Port device team_slave_0 added [ 134.616358][ T7105] team0: Port device team_slave_1 added [ 134.663916][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.674853][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.701108][ T7105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.714584][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.721991][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.748181][ T7105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.833890][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.842502][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.913145][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.951593][ T7105] device hsr_slave_0 entered promiscuous mode [ 134.989498][ T7105] device hsr_slave_1 entered promiscuous mode [ 135.040202][ T7105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.047790][ T7105] Cannot create hsr debugfs directory [ 135.079215][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.086297][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.108807][ T7312] device bridge_slave_0 entered promiscuous mode [ 135.132220][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.141118][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.150969][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.158334][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.167166][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.180680][ T6946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.230734][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.237815][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.246908][ T7312] device bridge_slave_1 entered promiscuous mode [ 135.254686][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.261885][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.270969][ T7288] device bridge_slave_0 entered promiscuous mode [ 135.284476][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.292003][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.300985][ T7288] device bridge_slave_1 entered promiscuous mode [ 135.324947][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.334804][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.344380][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.351499][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.359621][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.368735][ T6946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.418266][ T6946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.506556][ T6946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.567052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.597448][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.612020][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.623341][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.638487][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.654437][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.663155][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.704729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.715556][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.725755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.735008][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.744251][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.754871][ T7033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.801953][ T7033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.857510][ T7288] team0: Port device team_slave_0 added [ 135.880202][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.888512][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.900340][ T7033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.935080][ T7033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.993438][ T7288] team0: Port device team_slave_1 added [ 136.008617][ T7312] team0: Port device team_slave_0 added [ 136.016975][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.064158][ T7312] team0: Port device team_slave_1 added [ 136.098288][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.106084][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.133034][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.152971][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.164665][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.190884][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.204785][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.212457][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.239538][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.257848][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.265385][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.291544][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.336688][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.364603][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.376577][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.455160][ T7312] device hsr_slave_0 entered promiscuous mode [ 136.499396][ T7312] device hsr_slave_1 entered promiscuous mode [ 136.529959][ T7312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.537612][ T7312] Cannot create hsr debugfs directory [ 136.598524][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.610285][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.651759][ T7105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.755738][ T7288] device hsr_slave_0 entered promiscuous mode [ 136.800033][ T7288] device hsr_slave_1 entered promiscuous mode [ 136.869331][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.876943][ T7288] Cannot create hsr debugfs directory [ 136.910065][ T7105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.954564][ T7105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.011465][ T7105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.177077][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.193845][ T6808] device veth0_vlan entered promiscuous mode [ 137.237013][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.245614][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.254586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.263245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.272335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.280897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.296904][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.317707][ T6808] device veth1_vlan entered promiscuous mode [ 137.366887][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.376495][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.385589][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.395064][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.418504][ T6946] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.434929][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.453147][ T7312] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.502406][ T7312] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.603722][ T7288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.652050][ T7288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.721645][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.730934][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.739904][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.746962][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.754903][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.764550][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.773490][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.780593][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.788170][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.798330][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.807283][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.816129][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.824665][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.831810][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.840509][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.849705][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.858118][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.865234][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.873365][ T7312] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.941632][ T7312] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.991395][ T6808] device veth0_macvtap entered promiscuous mode [ 138.004961][ T7288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.044273][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.053261][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.061654][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.069765][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.078355][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.105618][ T6808] device veth1_macvtap entered promiscuous mode [ 138.117284][ T7288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.181887][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.190639][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.199371][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.207955][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.217127][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.225935][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.235077][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.243972][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.255525][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.271358][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.279636][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.287462][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.296650][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.333043][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.344965][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.355713][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.365825][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.394013][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.404117][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.422372][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.433831][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.458956][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.481061][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.496600][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.505691][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.517912][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.527612][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.538623][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.547895][ T7033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.584787][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.598442][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.614232][ T7105] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.621503][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.631083][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.638722][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.647847][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.692092][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.701336][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.729521][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.738266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.747493][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.754661][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.774625][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.797118][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.810373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.818369][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.827620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.836537][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.843679][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.932015][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.944916][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.955446][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.965495][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.003364][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.014308][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.074927][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.097735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.108335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.123750][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.133555][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.142305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.230761][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.247693][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.272755][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.286884][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.304223][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.316032][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.326426][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.354582][ T2474] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.361756][ T2474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.376520][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.395055][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.404015][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.413235][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.422139][ T2474] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.429295][ T2474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.437357][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.446659][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.470413][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.478238][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.499803][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.508744][ T6946] device veth0_vlan entered promiscuous mode 10:31:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x84002) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r3, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="6838fa118840c4836f9114be045382b5e5f10d3e35818c354285483d90f084b24afaa9c50fd0f8de1b65448ae629e194a64824214cc1a2c1867125fb90b29c13506521ffb96389620496c2abe36eeaea5802576cddb747596c8966a18cfa38a1ec5125b22a8d6eaecb30a94b93ca2290ed5306a07906186eb575f1c10602a4f467674e03d726dc07a74be78b9c3806e5c3722c5505c41c9bffcb1e926d402808202c2efdd5447be1d165128efdc501653c09f421a67da64487f855a3005ba31adc464515c9f52d25b2321bf5a1465a3aa7c330c1869e856f73d4fe05d1521e1fb9"], &(0x7f0000000240)='syzkaller\x00', 0xf8000000, 0x0, 0x0, 0x40f00, 0x8, [], 0x0, 0x1a, r5, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x3fc, 0x1}, 0x10, r4}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x10, &(0x7f0000000b00)={0x0, 0x0, r4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8d, 0xd6, &(0x7f00000001c0)=""/214, 0x41100, 0x3, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x0, 0x7fff, 0x1}, 0x10, r4}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110b0000000000025000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x25, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x7}, 0x10, r4}, 0xb7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, [@map={0x18, 0x7}, @map, @call={0x85, 0x0, 0x0, 0x15}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe55}, @map_val, @call, @generic={0x11, 0x6, 0x6, 0xffff, 0x4}, @map={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r4}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r4, 0x4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x6, 0x9, &(0x7f0000b67000), &(0x7f0000000000)=0x4) [ 139.548406][ T7033] device veth0_vlan entered promiscuous mode [ 139.561357][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.592386][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.613973][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.621967][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.630860][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.642951][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.677745][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.689482][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.697248][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.710601][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.722945][ T6946] device veth1_vlan entered promiscuous mode 10:31:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="25bca274769e22802734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d27014690e0206ef3ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable'}}]}) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x90000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport='privport'}, {@nodevmap='nodevmap'}], [{@obj_type={'obj_type'}}, {@fowner_gt={'fowner>'}}]}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000240)={0x0, "3cf1c90af41f9855ddba1635111cabc9366bfa231d2340b7863330f2ab28e9c8", 0x3, 0x4, 0x4, 0xff06ff, 0x4020420, 0xc}) [ 139.738273][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.756325][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.814576][ T7033] device veth1_vlan entered promiscuous mode [ 139.819006][ T8074] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 139.829299][ T8074] EXT4-fs (loop0): Can't read superblock on 2nd try [ 139.846284][ T7312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.856722][ T7312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.878745][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.888187][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.904435][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.924423][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.935454][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.942630][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.951077][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.960487][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.969104][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.976200][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.983902][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.994759][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.003862][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.012618][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.021670][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.031674][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.042350][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.050738][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.078039][ T7105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.132739][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.139662][ T8074] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 140.142739][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.158365][ T8074] EXT4-fs (loop0): Can't read superblock on 2nd try [ 140.160946][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.180643][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.208863][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:31:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0xffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x3cb}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnetconf={0x34, 0x52, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xfffff6e7}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 140.289913][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.301211][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.320768][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.334073][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.361805][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.399702][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.415727][ T6946] device veth0_macvtap entered promiscuous mode [ 140.449973][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.473439][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.481988][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.498356][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.507816][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.518398][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.527558][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.561705][ T8089] device bridge_slave_1 left promiscuous mode [ 140.567966][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.633105][ T8089] device bridge_slave_0 left promiscuous mode [ 140.641367][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.981402][ T6946] device veth1_macvtap entered promiscuous mode [ 141.025863][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.038320][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.047014][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.057338][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.066594][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.076848][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.098735][ T7033] device veth0_macvtap entered promiscuous mode [ 141.122839][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.133933][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.146625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.165072][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.177989][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.202218][ T7033] device veth1_macvtap entered promiscuous mode [ 141.210448][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:31:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000004ec71958242a9f36cac61525c778d7302c9ac186a1949ef746afd924da59e5ce9d454399224e49e669d3b1c84c81063ae5acc221", @ANYRES16=r1, @ANYRES32=r2], 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000100)=""/216, &(0x7f0000000200)=0xd8) clone3(0x0, 0x0) [ 141.296404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.313150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.331304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.340143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.356279][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.366923][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.385506][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.408621][ T7105] device veth0_vlan entered promiscuous mode 10:31:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000004ec71958242a9f36cac61525c778d7302c9ac186a1949ef746afd924da59e5ce9d454399224e49e669d3b1c84c81063ae5acc221", @ANYRES16=r1, @ANYRES32=r2], 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000100)=""/216, &(0x7f0000000200)=0xd8) clone3(0x0, 0x0) [ 141.498498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.518931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.559701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.585550][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 10:31:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x200, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="c31f1c3f97514b8d5656497af90a6fded701dc25464a0cb7c61ef920bf61884038ddd0c1d445dc0f538f400b2c762ee4aabfe7b0bf5f2b0f2d952fe0a8278dfbb7b64063adac1625ee4600e4f5ef9ae37ec72e7d095150fa01b8e3", 0x5b, 0x8}, {&(0x7f0000000200)="44af2669fe43576ae49703dea05eed6d117f995f9555ebae27e3755e9a3b2ec43fda44b2eb5d7dd31c3d4b37dc9b82d64251ec", 0x33, 0xfff}], 0x20001, &(0x7f0000000280)='\xaf-\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000002c0)=')(\':\x81.^.\x00', &(0x7f0000000300)='./file0\x00', r2) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000340)={0x1, 0x81, [0x6, 0x1c, 0x9, 0x5, 0xf800], 0x20}) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) [ 141.603991][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.625992][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.643397][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.666447][ T7105] device veth1_vlan entered promiscuous mode [ 141.700850][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.722826][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.742587][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.758212][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.771577][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.783851][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.795836][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.823885][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.859242][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.881966][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.899472][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.909008][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.926374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.938095][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.957975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.974143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.994570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.019943][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.052084][ T7312] device veth0_vlan entered promiscuous mode [ 142.066600][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.156570][ T7312] device veth1_vlan entered promiscuous mode [ 142.180531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.196143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.228991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.255183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.273312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:31:46 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)="290000002000190f41f4cbace7f9a7df0200000000e80001dd0000040d000d", 0x1f}, {&(0x7f0000000100)="aa31b7e46d420acf0dc91dd3545270d92a36d4d9adad47d3792996e8ecbf8e4db7812cea738cbdd76337be6cef97c5df2edc991464033868a328115a520e7490854904b32c880e7e31a12f3d26ada754fba147cff702c9c2b7b2ef620fc9501d56c1f2191b8cff5613e4532e9dd4d5dfe06998437b6946296bfa81dae9621bd5e38fc808497783a2b8e2a22fb3c7fbbd6613435b3697820441c3253c3e0cbb25e7f91f9246e6b6fac08b046e38e5256f4208e088d916c847895820516bca556b91198a2eca630ee65b5a746caf371ce58f69c2fa2fba74b025b34ca6cc96b49d7ec1982060b406ef301b54dc6ffa9cdc8169", 0xf2}], 0x2) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x4, 0x4000}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=0x300, 0x4) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x1409, 0x10, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000020}, 0x20000010) [ 142.419352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.427578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.470020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.486567][ T8162] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.535967][ T7105] device veth0_macvtap entered promiscuous mode [ 142.602676][ T7105] device veth1_macvtap entered promiscuous mode [ 142.730388][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.738429][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.770350][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.797098][ T7312] device veth0_macvtap entered promiscuous mode [ 142.826832][ T7105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.850701][ T7105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.862060][ T7105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.873432][ T7105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.884056][ T7105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.897877][ T7105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.914840][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.930122][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.940510][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.950823][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.960335][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.968993][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.984474][ T7312] device veth1_macvtap entered promiscuous mode [ 143.004061][ T7105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.014737][ T7105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.025455][ T7105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.036537][ T7105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.047199][ T7105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.058028][ T7105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.072326][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.092531][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 10:31:47 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0xffffffffffffffeb) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000540)={r5, 0x0, 0x20}, &(0x7f0000000580)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5, 0x3}, &(0x7f0000000040)=0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f00000001c0)={0x40080002}) 10:31:47 executing program 2: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x24040, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000100), 0x4) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000140)=0x1e, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x83ef, 0x0, 0xf62, 0x4}, 0x0, &(0x7f0000002200)={0x1ff, 0x0, 0x868, 0x80000000000, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) [ 143.108105][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.136976][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.161462][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.180946][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.202921][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.205156][ T8183] EXT4-fs warning (device sda1): ext4_group_extend:1805: will only finish group (524288 blocks, 256 new) [ 143.225871][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.246000][ T8183] EXT4-fs warning (device sda1): ext4_group_extend:1811: can't read last block, resize aborted [ 143.268463][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.306173][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.328932][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.350437][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.370553][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.412177][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.442055][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.459917][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.468308][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.482607][ T7288] device veth0_vlan entered promiscuous mode [ 143.496634][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.509978][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.521692][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.532874][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.544332][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.562565][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.589176][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.600485][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.614330][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.630723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.638676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.657983][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.667437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.732388][ T7288] device veth1_vlan entered promiscuous mode [ 144.016481][ T7288] device veth0_macvtap entered promiscuous mode [ 144.043064][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.052257][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 10:31:48 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 144.078314][ T7288] device veth1_macvtap entered promiscuous mode [ 144.100670][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.108767][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.208870][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.228554][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.255647][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.294854][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.311245][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.328895][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.346100][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.359743][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.396525][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.429538][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.444867][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.475134][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.494137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.503881][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.526503][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.539606][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.550670][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.561772][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.572101][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.583216][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.595435][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.606487][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.617362][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.628247][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.640985][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.653488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.663104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.762789][ T0] NOHZ: local_softirq_pending 08 10:31:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'caif0\x00'}) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x9, 0xff, 0x3f, 0x0, 0x3b}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x400800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0xa) 10:31:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002d000507d25a80648c63940d0b24fc60100002400a000200051a82c137153e670402098003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x400, 0x0) 10:31:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) io_setup(0x202, &(0x7f00000004c0)=0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_submit(r3, 0x1, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) r6 = socket$caif_stream(0x25, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r10) io_submit(r3, 0x5, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x2, r5, &(0x7f0000000040)="1421b84c41fa2a6a28fcd965f0095dadc54a814d39befa6b010299", 0x1b, 0xfffffffffffffffa, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xc48d, r6, &(0x7f00000000c0)="f6a94a116ebae332cadcd42505508d79465e96cb584b740b33c44ea43c8a9e2b6c339855abe63d187db5d3a26944fc44b4720674ef88c3d18cbe50cdcaf88c88c57db821ca90c7922c99dea2b9", 0x4d, 0x7ff, 0x0, 0x2, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)="29c0c0cd0a18b88b0f27714a167b78fab54b52e1e39a7623dd20affeb15150377d2797114892859663424d56a9f3cb4c76142b099eeca2aeee015e74987a26eb622ac432055cfe1354fad1ad826aa78458ce752d11739628b051c649f3333a0d4522d3d65f0eddfb17c9a7841d4eb0e8a9bb3b68695d", 0x76, 0x4e36, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0xbb, r9, &(0x7f0000000280)="a3e951c2b2a7ba1025b0832f96f7243f", 0x10, 0x80, 0x0, 0x3, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x800, r10, &(0x7f00000003c0)="5a93317f7c97423b1e44dcfbaf6c55ab397dccf676ef1c601d2990384380b9cb33b5574f183233eed61759aab4ea787a0a233270edde98d4b4ed089df3f25e6f1f32c7f1442c670c23c574504bcbb79178d360229fa9553d18f83933b7070e98bbdb9e667f5b0d79415ff5ee3f004d48", 0x70, 0x3, 0x0, 0x2, r2}]) 10:31:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7473a048", @ANYRES16, @ANYBLOB="110000000000", @ANYRES32, @ANYBLOB="140002"], 0x30}}, 0x0) fallocate(r0, 0x0, 0x0, 0x10000) sendfile(r0, r1, 0x0, 0x11f08) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @xdp={0x2c, 0xe, r4, 0xa}, @isdn={0x22, 0x1, 0x9, 0xed, 0x6}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x102000}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)='veth0_to_hsr\x00', 0xfffffffffffffff9, 0x660, 0x2}) 10:31:49 executing program 3: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x430100, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6408ea45591b5ac50d872db8fc45d7aaf3bd5f8173eb0d0f0e07638aef101b17203ffc820b68f0e1dae6596c9d5fcdd07a02", 0x32) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 10:31:49 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000540)={r1, 0x0, 0x20}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3ff}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252002cb18f6e2e2aba000000012e0b3836005404b0e0301a7b2c75f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1f0816f1f6000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@private2, r3}, 0x14) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 145.091223][ T8231] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 145.122378][ C1] hrtimer: interrupt took 56423 ns [ 145.185772][ T8231] team0: Device ipvlan1 failed to register rx_handler [ 145.207233][ T29] audit: type=1804 audit(1593081109.650:2): pid=8244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir250392425/syzkaller.q2wfQi/1/file0" dev="sda1" ino=15789 res=1 [ 145.262768][ T29] audit: type=1804 audit(1593081109.660:3): pid=8244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir250392425/syzkaller.q2wfQi/1/file0" dev="sda1" ino=15789 res=1 [ 145.325068][ T8246] IPVS: ftp: loaded support on port[0] = 21 [ 145.376168][ T29] audit: type=1804 audit(1593081109.660:4): pid=8229 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir250392425/syzkaller.q2wfQi/1/file0" dev="sda1" ino=15789 res=1 [ 145.681523][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 10:31:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000540)='/dev/v4l-subdev#\x00', 0xff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x0, 0xffffffff}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r2, &(0x7f0000000000)=""/212, 0xd4) [ 145.753695][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 10:31:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002d000507d25a80648c63940d0b24fc60100002400a000200051a82c137153e670402098003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x400, 0x0) 10:31:50 executing program 5: r0 = socket(0x2a, 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 10:31:50 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308aa}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES16], 0x4}, 0x1, 0x0, 0x0, 0x880}, 0x4005) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000007e40f22ebfc7ca986f0a8c54a1b41dd4ad5abcd6b607166a5d5fa8676b72cc8c99fcde790e83eef8f9d23ae87fbd53ba134a1aadcd54923c50bbdfaef72795204e925e297cb268984604bfe7fe9870b9dbe55df63fc7056a29fc73e982a7da35daad9d7b3f1b3949f1dcd8c4f22ef200"/137], 0x14}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="0500e077186335ffdeafe5ab15ab0303fb2e632c710c384284bb4b09e66f024236496aaf645d3132d59f1c89d2a87b6f46f78f4f12891d8ce7e7555ac89ea7bb81074578758828c46b8e238bf1c431d927ca7e44be809a1976db10b51e38af9976389dc2300c2812cd13808282581371c56243b6b6b244b1cffcaa17aab6febeb42e0e54f936207284b07eb1431893ca922924b42f", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="c80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000001093f3f000000000005050008000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x40c0}, 0x24000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '-\x00'}, &(0x7f0000000100)='\x1c\x00', 0x2, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x3, 0x1a000, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090700000000000000001f"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24007ba130b4a585fb4a71", @ANYRES64, @ANYBLOB="000229bd70e6fbdbdf25060000000802b292f2f254370005000400000008"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x881) close(r0) socket$inet(0x10, 0x2, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) [ 145.944477][ T8243] IPVS: ftp: loaded support on port[0] = 21 10:31:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$audion(0x0, 0x0, 0x88202) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)=""/28, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, 0x0, 0x4000001) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "290da2be9375adad", "8201696b658de53bd501b5ccc063188ee556dc13f144c600ab5b0ae476305810", "c9f8576e", "74d2f1a92d4345a8"}, 0x38) write$binfmt_aout(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d501040000"], 0x92) 10:31:50 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x400}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x8}, 0x3c) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_enter(r3, 0xce93, 0x4, 0x0, &(0x7f0000000040)={[0xaec]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 146.188228][ T8289] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 146.188228][ T8289] program syz-executor.5 not setting count and/or reply_len properly 10:31:50 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) socket$nl_route(0x10, 0x3, 0x0) [ 146.356026][ T8302] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 146.356026][ T8302] program syz-executor.5 not setting count and/or reply_len properly 10:31:50 executing program 2: memfd_create(&(0x7f0000000180)='\x00\x00\x00\x7f\xc9\xe9\x0e\xff\x8b\xe8\xd0\xb8\x80\xc7\xf5\xe2Z\x03\x00\x00\x00\xa0\x92\x01\xa2\xf7\xbd\xfcK\x13\x00\x00\x00\x00\x00\x00t%\xfc\vw\x82\xdb\xf1^\xe8\xf8\xc1-9Q\x00\x04\x00\x00\x8b[\xaa\x91\xef\x7f@\xd2z\xb3T\x9e\xefn7%E\x00(\x1e\xd1P\x0f\x9f\xca\xff\xcf\xc9c\x97\xb3\x81\xa04\x03\x1b\xf5\xce\xfa\xdc\xf6\xf2\'\x83\x82\"#K\x02eU\xae\xd4P\xc0iH\xf2g\xc9}\xf4I\xb0}\x9er#y\x0e\xcb\xa3\x80\xb5q\x1c\xef0\xbd\x87\xe8\x8e\x88\xe6^\x01\x00\x00\x00\x00\x00\x00\x00\xce\x8a\xb3\b\xee\xd8I\xbck\xec\x80\xfa\xce\x86\x85\"\x1d\xa2\xc2\x1d\xf0\xc3\x9cm\xcf\x8a\x00\x00\x00\xe31\xe6\xc3\xa5\xb1\x1c\r8%\x06\xc3c\xe0\x7f\x88W\x18u\xdcbl\xe5(\x97c\x1a\xfd\xe0\xfa\xc0\x97\xc8\x95\x82u\x82e\xf3\xe7e\xf59\xf9S2\xd1\x98\x81\x8f\xbfwr\x97\xee\a\x8a \x1c%o\xed\x9e\x11\xd1', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000280)=0x4) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) r5 = fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0xffffffffffffff01) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x400) [ 146.411241][ T8322] IPVS: ftp: loaded support on port[0] = 21 10:31:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$x25(r4, &(0x7f00000000c0)={0x9, @remote={[], 0x2}}, 0x12) 10:31:51 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0xc3ffffff00000000) r1 = gettid() r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x9a0000, 0x6, 0x0, r3, 0x0, &(0x7f00000001c0)={0x9a0920, 0x72, [], @ptr=0xffffffffffff0001}}) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x4, 0x1f, 0x3f, 0x8, 0x0, 0x8, 0x50080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x877b, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x12100, 0x100, 0x80000001, 0x0, 0x9248, 0x0, 0x5}, r1, 0xd, r5, 0xa) [ 146.831567][ T26] tipc: TX() has been purged, node left! 10:31:51 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x7) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) [ 146.873716][ T8357] team0: Device ipvlan1 failed to register rx_handler [ 146.895776][ T26] tipc: TX() has been purged, node left! 10:31:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)}, 0x44004) [ 147.194647][ T8322] IPVS: ftp: loaded support on port[0] = 21 10:31:51 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0x100}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff0}, 0x0) syz_mount_image$erofs(&(0x7f0000000240)='erofs\x00', &(0x7f0000000280)='./file0\x00', 0x10001, 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)="488eb780e6bc902f7155dc5c116789995fcb44ab79909ab4d9adb3f44cb76605d5732dad2d4e6a514685ebfe5ee9b7339742cb16b7ce9a4fd3b7d6a48a4cdec0bb82af6dbc0be4afa5c24b92a2aa1c5247e31ab2e951a3f81a6e7cc529d414338c2e2c96d4bbfb2f66abf38a71455265c916e1c542d0cd713c9c2efc0f8809d4575ba01652", 0x85, 0x8}, {&(0x7f00000002c0)="72125407f7da19233fba39a154c7479c54b3f93e9b0111", 0x17, 0x100000000000}, {&(0x7f0000000600)="4472ad92b6044a5c0c87cd0c32a82006e83ec4adb54b950a7a059110930df7f168e23e8e3c51ba4726ba70937dd18421da338a9107303b5f8e44d986259b907b2870cfe7b3551a436d3afb759477d598c9551db8f1b0", 0x56, 0x5b7}], 0x1000000, &(0x7f0000000700)={[{@fault_injection={'fault_injection', 0x3d, 0x100000000}}, {@noacl='noacl'}, {@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x9}}], [{@pcr={'pcr', 0x3d, 0x28}}]}) r1 = syz_genetlink_get_family_id$tipc(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfc}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x800, 0x70bd2a, 0x0, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:31:51 executing program 4: socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x400, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) clone(0x14398000, &(0x7f0000000040)="5dc20281fc31d71481f6c58e567bf2f743741c20db08c11d446403a23862ef1849f8db59fb22669eeb19d8b97da1038fc8c10a9be7930842fee5f6106f5c6990b3ab973da19ee2e39c2b21bfa635ce2d01b3bc0772e375720ccfd04c799d238bb05c372775daf5e4d390a13177bd6957b755c4ea3f98c9b5d77b2118f5ee871cb5f9dafbdc863539daed0393d5b983427e6ed254949f14c179037b65ef433ffa48ee4035ad2418cd28ed09cc71fb9db260f835a1915783bd5c67fa15eb5e383947cf", &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000300)="0424eebf065714db6cd4d11c771b72f73f8bf8b57bed7fb3ddb5365d148d1b856a87a599444fda42c898b1eabd33cee606f06fd265a4730b576fbb7313a7797fa03239cd7cf50350606b0cfa5938ea6cd1d78a52bc2402fc2c7f0ba7e3991ade5b252af62d1982f953e4f82f9c66a1c96fd8822b9e61df7e0ef354b92457cd32f596c243cd91360aa28553f9d2aa80e7b0ea567d21cf8027182d02dd1b562b6652bf31bb083f0c1eb0cb59bc70292cc99bd7ce3c25714090200a0f6f1b0ddeffaf354beda6b53a4089234d5031a1ac1e02007c6d5782cdcd5de5b50c7c0546f1e15ebeac43b0") sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000200)=@in={0x2, 0x4e1f, @loopback}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xfa38) [ 147.429680][ T8376] erofs: Unknown parameter 'fault_injection' [ 147.528143][ T8373] IPVS: ftp: loaded support on port[0] = 21 [ 148.091466][ T8355] team0: Device ipvlan1 failed to register rx_handler 10:31:52 executing program 4: timer_create(0x0, &(0x7f0000000380)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0)={0x400001, 0xd1c}, 0x8) dup2(r3, r7) [ 148.184748][ T8384] erofs: Unknown parameter 'fault_injection' [ 148.207576][ T8379] IPVS: ftp: loaded support on port[0] = 21 10:31:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000000)) [ 149.833475][ T8400] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 149.902218][ T8403] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 10:31:54 executing program 2: dup(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0xffffe000) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 10:31:55 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/121, 0x79}, {&(0x7f0000001280)=""/212, 0xd4}, {&(0x7f0000001380)=""/136, 0x88}, {&(0x7f0000001440)=""/125, 0x7d}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000100)=""/58, 0x3a}], 0x7, &(0x7f00000015c0)=""/239, 0xef}, 0x100) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000540)={r4, 0x0, 0x20}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001700)={r4, 0x7, 0x4}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="fd20000015", 0x5, 0x0, 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f00000000c0)={0x3f, 0x5, 0x46, 0x1, 0x1, 0x3, 0x2}) sendto$inet6(r7, &(0x7f0000000080)="6c54000000eb", 0x6, 0x800, 0x0, 0x0) 10:31:58 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000400)={0x4, 0x21, 0x6, 0x7f, 0xe, 0x71bc}) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="240000002e0007031dfffd946ea2c6218451004a0d000000000000e5fc1ae3a20400ff7e280000005e00ffffba14a0aa1c00fdb3ddeb1349c52b3ce9fad90f421cb467278900000000000100", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x3, 0x1a000, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r6, @ANYRES32], 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "d36e7c7f2508baf51b"}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44840) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$GIO_FONT(r7, 0x4b60, &(0x7f0000000000)=""/30) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000f7032000b8a17000fedbdf2507337e2187943bd5ad7666bd29f3b2c513000000070000002e2fe6696c65304e2f66696c65300000f2ed90c81dcac264713c0a6b18"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) 10:31:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x98}, [@ldst={0x6, 0x2, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x880800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x94}, 0x1, 0x0, 0x0, 0x8100}, 0x44) 10:31:58 executing program 3: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x44c080, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200}, 0x8, 0x0, 0xb08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getpid() connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 10:31:58 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '1/\xff\xff\xff\x7f\xa0Yh\xe7\xe8\x95@--^\'\xee\xbc\x85\x89V\xd7\b\xc7>\xb4\xc9=.\x11\xe5\x1c@\x8e\x92s\'Xq\xac\xb4p\x83\xf1z\x94_\x01\x83\x9em\x05a\x91I\xdb\x87p\xa03|X\xb29!\xfb\x03\b\xf7\xda\x16X\x02\xb1{\xa4\xd8\xa0\xc4\xe8\xaf\x83X\xf73\'\xf49L\xdd\xaa\xa9\xf5c\xeb\twX\xef\x18\xae\x9a\x00\x1a\xaa\xcf\xe3D\x7fh'}}], [], 0x6b}}) 10:31:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008085}, 0x8c0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\x00P', 0x10, 0x3c, 0x0, @dev, @local, {[@fragment], {0x0, 0x0, 0x8}}}}}}, 0x0) 10:31:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="b097a67bd166582e31c3b48ba5fc82527aea810a08fca64aac966d5da7a4dbfeccd7c17362ccfb7f3d1eefb08428c5af71384e58c97f3efc77b31a19d06c16cfc56a03890bbc6feb9e362f27705c5842b39f4e7cabf1a656cd5135d405e31756285fafb2a728e9ce8889541486328ec3f165ebdb7f3dbc23f1b2a80b46e3deb6dfc986788ba97b2d2e621f150f86116fef2e5092"], 0x24}}, 0x0) 10:31:58 executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0xf8000000, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x3fc}, 0x10}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, r4}, 0x78) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r1, 0x10, &(0x7f0000000400)={&(0x7f0000000540)=""/82, 0x52, 0xffffffffffffffff}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0), 0x10, r6}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000633a77fbac14143fee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) 10:31:59 executing program 2: unshare(0x60060280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000180)={'tunl0\x00', @ifru_flags=0x1}) 10:31:59 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000000005, 0x0) 10:31:59 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) munlockall() bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) 10:31:59 executing program 3: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r0, 0xb01}, 0x14}}, 0x4008000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x20001, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000400)={0x6}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$UHID_CREATE2(r6, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x58, 0x9e, 0xff, 0xdb18, 0x2, 0xff, "09a95f973a05dd676d36d5080f336f113d9f39ab6ac35bfc632561fecc57ad1c755f1edc0cd05c351df01e55caf7a27069b7ad8c399345bbe665de3bfee9c27ee6b0a8384ec0014e448b0291bf3a61551c283edab7dffabc"}}, 0x170) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000040)=[0xfffffffd, 0x2, 0x800, 0x7d, 0x5], 0x5, 0xffffff65, 0x4, 0x2, 0x0, 0xfffffffa, 0x1, {0x2, 0x1000, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x2, 0x1, 0x7fff, 0x5, 0x1, 0x9, 0x3, "d2e5589f2c18d94229b585d199a1ef652c98b55589cb4c215930c275587d0cf7"}}) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x480303, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @bt={0x7, 0xfffffffd, 0x8, 0x4, 0xfff, 0x3ff, 0x1b, 0x5}}) sendfile(r3, r2, 0x0, 0x100000001) [ 154.902039][ T8457] IPVS: ftp: loaded support on port[0] = 21 [ 155.018240][ T29] audit: type=1804 audit(1593081119.460:5): pid=8465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir640579486/syzkaller.mymEwt/7/cgroup.controllers" dev="sda1" ino=15802 res=1 10:31:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x60, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "2c576d1bec355f07ac727504008b718f7930ea63bc262cebb9f8945d0f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x20004080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008801b0000000000a58833d64a60608cfc987d166663bf0afedaf707e7072896a690a8120ecd9e68a123baa2b8b5cca76bce994d249713c036b7e3f88e2f54e4c1e55c6809b96fdb4326a3a2bbed6a1b49c022e907e17eb43345b761a13720321a4c128eb4d4f160405ac0f3ab05870454e7634046d707396bcc467a"], 0x50}}, 0x0) [ 155.215027][ T8485] tipc: Enabling of bearer rejected, failed to enable media [ 155.254218][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.490655][ T29] audit: type=1804 audit(1593081119.940:6): pid=8468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir640579486/syzkaller.mymEwt/7/cgroup.controllers" dev="sda1" ino=15802 res=1 [ 155.541603][ T8500] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.576566][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.684893][ T8457] : renamed from tunl0 10:32:00 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) write$cgroup_pid(r1, 0x0, 0xfff6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) syz_mount_image$afs(&(0x7f0000000280)='afs\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e821f8598afee0eafc018ea8c53b1741f174b2a083f24214f5750224fd7767b089c8a309d92212bbde04c2fdf366c3d683699579bf77edbbacd7996ee5fd3ceb4772829bbacc3a555cd0e184b5c8adb97ad85d3c39ae259a2063a1f957814fea570831220e8103f67d14309c3fd806bf40bdda80599ae2b12249bec4f344676447484730a1c62853dbdd38cf9f8dcbffc361cac6ab03a536a47cabf0d318e1d70fb364b63910b00f13b4206259d5b4e4e6b8ec7b78b4b778e299135446d112cedc99d3cbb9fb", 0xc6, 0x800000000000001}, {&(0x7f0000000400)="afe89c22b2f12c0e8c", 0x9}], 0x40, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC=r4, @ANYRES64=r3]) write$cgroup_pid(r0, 0x0, 0xfff6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x1) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000dad60000009c2b008c5c0000004000"], 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x90) 10:32:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x5ee, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840213f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) [ 155.965458][ T8508] kAFS: unparsable volume name 10:32:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7f, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000000200)=""/16, 0x10}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x6, &(0x7f00000004c0)=""/121, 0x79}, 0x100) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) write$P9_RCLUNK(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000380)='>', 0x1, 0x0) keyctl$get_persistent(0x16, 0x0, r3) keyctl$invalidate(0x15, r3) ftruncate(r2, 0x80006) sendfile(r0, r2, 0x0, 0x8000fffffffe) 10:32:00 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000000005, 0x0) [ 156.370363][ T8521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:32:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x92, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:32:01 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000000005, 0x0) 10:32:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x7, 0x1, 0xffffffff, 0x5, 0xfff, 0x72, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4b2000021000000611008000000000024000000000000001500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x34a}, 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="751c7603db444e6c6e7aa517d1d9c8ad0ba5763c05a601d1541e0aacddb0468a43e02262e9106c4f7c13b91caf4c856be5e38a57d63c61ab7c4dfbb41d070ab833baae91a99b8d73875853522ceac4b4eed23fc49335f95d5be4773a9bd6765b54247d26abfa6ae0023f2bd097004cfd162acf3ef78b66d28dbc0171517cce23f7a216dac1e83c1c2bdcad73ead847557a3d839d5f20cfe694ec5977961199a0f6faad44b337b3b761c675e3e0f0ddd35732b260b960be99867035aab1d2d3846ea366fec9fd9ad5250e6feb2c80901c8d97f723affce8d014bdc5ecfafe7d453993eabb", &(0x7f00000001c0)=@buf="29733a227d1216fa2bccd9a0c48c7d5be9b2ce2aecbdb3a9575768ec1347505829698d46a6471f35e5a252c72f4c7ae13f3183bd7ffd8b2133", 0x1}, 0x20) ioctl$TUNGETSNDBUF(r5, 0x800454d3, 0xfffffffffffffffd) [ 157.389605][ T26] tipc: TX() has been purged, node left! 10:32:01 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x0, 0x8000}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r3, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="c80000000000000016010000000000007c25069e0a93fe8efee84ecb804ff461140810148999d90154c45c3f8d0fa69591d7578e1415cc73d08a22f13071c549567b56b18c79908a83392165fd20788e4bc5f100d607076476eaedf808f74a212b9e1f528f1e9e54f1fb107b5d7bc5c3a64f9ef85988e6a0a21b7561e0efb6a47c20a1db6f2fa0a12675ecec86eb7590fa45f9519053aa5e18a6ce998a5b75b8292e26d2629a83ca56b8be37046f2daf0866a38bdbf4996d95c5e7f6c784c7e65c57000000f68a8db11c9482f3dc3b1fff63dad2e1ee93a2cc55f95c445bd0403653de5d8b42694df9cdd1f2e723fb82569f081cd50b521755f578fc6b3f799b578c8f2691bd1acb4cb064a29e3f3aef1e8b42a46f8dde5f831696d20aa340cee909410cd2fb5f2c365418ec65ea6a939c364fc93a56c6c8637ef1c61d"], 0xc8}, 0x0) 10:32:02 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x7, 0x12ed, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300), 0x4) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4182) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = memfd_create(&(0x7f0000000200)='.^\xcd\xef&1%\xcen\b\xfb\v\x95Y\x027=2\x96\xb6t\xfa\x91Z\xa0\xccZ`\xc5\'\xf6]\xdd\xc9V\xf7T`\xb6\xa0p\x115Z2\x18\xb9\xae\xd6\x83\xfev\xfc\xf9\x97\xaa\xd6Z\xc0;T\x98/^A\x18\x00\xd3', 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000001a80)="bb", 0x1}], 0x1, 0x81805) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x24000000) socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, 0x0) shutdown(r4, 0x1) [ 157.552708][ T26] tipc: TX() has been purged, node left! 10:32:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02080000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) 10:32:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000540)={r4, 0x0, 0x20}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea4000023000505d25a80648c69940d0124fc60100002400a000048051282c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) [ 158.039438][ T8564] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 158.079314][ T8564] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.122775][ T8565] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 158.144084][ T8565] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:02 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data}) 10:32:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x268, 0x0, 0x0, 0x268, 0x460, 0x460, 0x460, 0x460, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x0, 0x0, 0x0, 0x60040000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'bond_slave_0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r6, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x3, 0x1a000, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="090700000000000000001f"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x94, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "ee04"}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2a4}, 0x1c) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r9) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000080)={r9}) ioctl$SIOCAX25GETINFO(r10, 0x89ed, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:32:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x9) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000680)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmsg(r5, &(0x7f0000000640)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000140)=""/49, 0x31}], 0x7, &(0x7f00000006c0)=""/116, 0x74}, 0x1) [ 158.541941][ T8574] xt_hashlimit: max too large, truncated to 1048576 [ 158.566456][ T8574] xt_hashlimit: overflow, try lower: 0/0 [ 158.600783][ T8575] input: syz0 as /devices/virtual/input/input5 10:32:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000380)) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x20, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="837d609d2e9f33f0d661af0f7444a8393aebaac6e4247576aef59444b6b77e817c42dc890545963fd48f81064c40915c50d0915617c1b30ce764f80b6d50756192cd49adf1e9fe9f64ff39847777f7cb795d74c9ecf9b3ad8d5d86b7292a22737fc7bd7f09742d80c21c37f4a2a34db1c313edfc9fb237e47c850a0175491a798512aa", 0x83, 0x1ff}, {&(0x7f0000000140)="358be1081cc6891bad7805f95bf32251397ed5e7569ebb", 0x17, 0x68d}], 0x8000, &(0x7f00000001c0)={[{@acl='acl'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x100000000}}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x9bf}}, {@fault_injection={'fault_injection', 0x3d, 0x7}}, {@fault_injection={'fault_injection', 0x3d, 0x20}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_lt={'euid<', r2}}, {@fowner_gt={'fowner>', r4}}]}) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000100000000000000000000000010014000000000005000600000000000a0000008462467039d0f50c0000000000000000000000000000000011000000e4001500000000000200010000000000000000000000000005000500000000000a"], 0x80}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0xee00) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e21, 0xfffe, 0x4e23, 0x7, 0xa, 0x80, 0x0, 0x3c4d229add19c9d1, 0x0, r8}, {0x4, 0x101, 0x9, 0x8001, 0x9, 0x0, 0x7, 0x5}, {0x8000, 0x3, 0x1afb, 0xfffffffffffffffa}, 0xfff, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x1, 0x2, 0x0, 0x4, 0x3f, 0x81}}, 0xe8) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f0000000340)={0xa20000, 0x3, 0x800, r1, 0x0, &(0x7f0000000300)={0xa10907, 0x6, [], @p_u16=&(0x7f00000002c0)=0x20}}) [ 158.650631][ T8574] xt_hashlimit: max too large, truncated to 1048576 [ 158.664539][ T8574] xt_hashlimit: overflow, try lower: 0/0 10:32:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r2 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 10:32:03 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00080000000000003000120009000f0076677468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000024221900"/20, @ANYRES32=r9, @ANYBLOB="00000800000008000000000009000100666c6f770000000004000200"], 0x34}, 0x8}, 0x0) 10:32:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000200)=ANY=[@ANYBLOB="7c00000006d81cdbe4595741a49edb204b5ef3ab7ba1c084736332ee0ec5e7aa2ea7f17c1a2c03ba5fc293baf875f0faa031e57b3b631450778435000b33f07a00b8319f1e1b7eeb1ad29c8295ec7ab1a4ebc3c61381152ab4ed439f15ea9985a0a344e3998e36a37c415a2848a3003d7a24ec59b87c1a5361e5cbe738f2a5bb537a88023cede4bae042fa05e3f9e7d3f71e6d71a9ea7edca9b212c23d4e89dfb082b06993f43c7eacff473f13aa8049c7035f1a2e4dd79ed361f3b44f0c80294c4ca4ade825ade7f942a844038d2123c996671f5a41a34f634349d7fe8ef6c39ed71d39f55032dbfcbe08d2df3c211a901c95fc55685419a84ce73af4e1595c4139546d8f84e182361b3f0c77be1b9f5a4a8061"]) r2 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 159.149225][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.230066][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 10:32:03 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0)='security.capability\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$int_in(r1, 0x0, &(0x7f0000000080)) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', 0x0, 0xc) 10:32:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000080)={0xfffffffe, 0xd95, 0x0, 'queue0\x00', 0x892}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x4, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 159.399300][ T8603] input: syz0 as /devices/virtual/input/input6 10:32:04 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) unshare(0x40040400) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:32:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6261727245b5338aa36cd7f7287252e596518ff8e53abf26284f8f93696572ff7f000078f3ae4eb300"]) 10:32:04 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000a004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x20}, 0x1, 0x0, 0x0, 0x3cb}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}, 0x1, 0x0, 0x0, 0x3cb}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00', r5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="d603279774ef4dee8580c51e7c0eb7ba58ae9911264d484fa06b257fa154d3cac830524116ef1377db280b50c1666988460f9380eb04901fd2360c420f65909baaa8f0bcf1c55fab07cc4c8164f95b56199d528908a579b4a5eca3a5629aa271183db1", 0x63}, {&(0x7f00000000c0)="4e8937a47acbdd880f1895df90729b5a4017a712ec4d55b76140f698d1b0ed0a69c63834f575af38b85e5ea03d93148f0a610a21a10518571e7841f1584e39d85dab5039691081c9545aec6b4f118eb070d721ca023438d29b17e0e8c51b08db103d87d5287767595827cdac1cd938ae7afbec361e", 0x75}, {&(0x7f00000001c0)="97f32f1b3469502b78474546545066d277a486b58f80412727c81ea00c4b73ee015077d9074907f2c0d21ade7efab9e9f29f45cf5e636901a272177d3ca3e9881a973a531648e14e2ebab074389dfd26fede98e4b8fd9822", 0x58}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x60000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x632f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xad, [@private=0xa010101]}, @end, @ssrr={0x89, 0x23, 0xd3, [@rand_addr=0x64010100, @rand_addr=0x64010102, @remote, @empty, @loopback, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x2b, 0x8c, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x3, [0x8]}, @timestamp_prespec={0x44, 0x14, 0x9d, 0x3, 0x0, [{@loopback, 0xff}, {@loopback, 0xfffffffd}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x148}, 0x200c4004) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) [ 159.710920][ T8619] hfsplus: unable to parse mount options 10:32:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000006c0000000085733d1fc1ca6e350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x0, 'bridge_slave_1\x00', {0x2}, 0x5b3}) [ 159.935065][ T8618] IPVS: ftp: loaded support on port[0] = 21 10:32:04 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x10, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c526664c0803d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) [ 160.282281][ T8653] 9pnet: Insufficient options for proto=fd [ 160.310311][ T8622] IPVS: ftp: loaded support on port[0] = 21 [ 160.340236][ T8657] 9pnet: Insufficient options for proto=fd 10:32:04 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x931000, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000200)="299f226ddfb1d7de3d561d711d9f78f1ae5e8e929adaa35ba265bf656a9c26a801c998bc191ee4d706b58441599df2e5adfdf509c909535d24c042cebd39a86a6b8099d59ae437a6c6cc03222d78080a2de0dc1b0c29321ae7a576f07a199bb9899fb49d833aedcbd3b40619f1a0b6b43e3b0f0207c30483ef785567e6f024e38a649f7654167eb121cfb4e2c8e8d3e5bfa3f25b6ea5a7b1fd1d4f6e99f8dbc353d1f2b29e8e771baf1d613b8173c0491443b1f9eb614a27550728f6dd85c11cbea8f0c14fda6671b3d1ed45d22f3fdc761fb7cd92368376") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000834e1aa3af71682dd19f00000000000000611104000000000095000000000000007a83fa36ade165befa9bb958cb1b318996cc233ff3f73ccb453fe0ce9140830e08d95fec0a137ded53529a69352cfc5c4f7a0184680a5d7e4650014be468c7a9387ba6bc4ff93acf43a4382993ecdcbf427b8a826020d7c9ff9dc636c1fafd8d3cbe2bc35d45096a65805f0358e58cac9fb49c467536173abe396156e2af81d391b4bef537c810cb80d805ff80ff68f752da60f69d92f7ea3a25c486bc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:32:05 executing program 1: clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_settime(0x0, &(0x7f0000000000)={r0, r1+60000000}) 10:32:05 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="002300010036657468"], 0x48}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}}, 0x0) 10:32:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f0000000040)='./file0\x00', 0x3) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3, 0x3a8e, 0x3}) [ 160.936205][ T8690] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.984982][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 10:32:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="b58ca7dad016a924a5d5dea0405024a8a29e7b01b2999bb555e702372c7982c9233da56d3ce905715d7a4c8a789942bfa5511ca5a44aae562000004c1a534c5b7ecf54246233f43aaddf527c47d8ae533bdde104a88fc1d9d0300ed90cb650cf690ae637725f0000000000000000000fa6"], 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0xb00000000065808, 0x0) r8 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r8) ptrace$setopts(0x4206, r8, 0x0, 0x0) tgkill(r8, 0x0, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r7, 0x0, 0x100000001) 10:32:05 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x755, 0x2626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x80000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0xffffffff}) 10:32:05 executing program 2: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000012e80)={0x0, &(0x7f0000000000)=""/143, 0x0, 0x8f}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x80c0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000200)={0x2a, 0x29, 0x2, {0xfffffff7, [{{0x1, 0x4, 0x8}, 0x80000001, 0xff, 0x7, './file0'}]}}, 0x2a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000240)={0x80, 0x1c, 0x448, 0x10001, "d9a9373044a23c40114b6985821d81ebb2580ae9e88201f6f39b375c8dde19a9"}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)={[{@xino_off='xino=off'}, {@metacopy_on='metacopy=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@uid_gt={'uid>', r3}}]}) 10:32:06 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000079110000000000009500000000000000c9be2ee5a20e056c2555fa2258d1897031c0cb6e668e2ce417904b851d7607df8fd3e488f7611466abd2c58b1275fa3e77169e4d8e1ea9dbf625e0535fab0b8194108220630105e196317ea0243d3bdcf112c023224bbbb2567e3f962c739feeb9d7fc288085b6559de9b17a13b8f22fead1ba2ff62e9f1ac8d5df103423d49f268a084bc167161fdad8f9b8a3988a0748c79c71a459407aff4b321b40bbbc3208d4833b4cfc1591f5e6293948851df071da2d116de703d395ec4d1c0e1735e3f7c93119000000000000010000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:32:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x2, [], "25d5551611c65a00c783b7e88b0be7d7"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) setresuid(0x0, 0xfffe, 0x0) write$9p(r4, &(0x7f0000000040)="3b5d46ff07000041", 0x8) [ 161.709675][ T8198] usb 2-1: new high-speed USB device number 2 using dummy_hcd 10:32:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x4}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000400)=""/214, 0xd6, 0x20, &(0x7f0000000500)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x6, [@default, @bcast, @null, @null, @default, @bcast]}, 0x40) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x108) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) fcntl$getown(r2, 0x9) getsockname$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 10:32:06 executing program 0: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4104, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0, 0x26}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x42004, &(0x7f0000000200)=ANY=[@ANYBLOB='modm=00000000000000000000271,dont_measure,euid>', @ANYRESDEC=r3, @ANYBLOB=',obj_role=/dev/ttynull\x00,dont_appraise,smackfshat=/dev/ttynull\x00,smackfsroot=/dev/ttynull\x00,appraise_type=imasig,fowner>', @ANYRESDEC=r4, @ANYBLOB=',mask=MAY_EXEC,\x00']) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x80080, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000300)={0xf7b, 0x2, 0x6}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x18acb000) [ 161.978236][ T8718] overlayfs: failed to resolve './file0a{/S6 W*ͻ4g+-ixAүϨ[ J|lo䇴r$~njƉl.C nx ={<ʩn': -2 10:32:06 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x81}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0xffffffffffffffff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080010}, 0x8000) [ 162.059027][ T8718] overlayfs: failed to resolve './file0a{/S6 W*ͻ4g+-ixAүϨ[ J|lo䇴r$~njƉl.C nx ={<ʩn': -2 10:32:06 executing program 2: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6f6d216c7fb5c4d08400030000405800f37f0d00010074644e7f4c65b781e347"], 0x3}}, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x4d9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 162.190601][ T8198] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 162.340356][ T8731] EXT4-fs (loop2): bad s_want_extra_isize: 25441 [ 162.389519][ T8198] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 162.423378][ T8198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.489134][ T8198] usb 2-1: Product: syz [ 162.513904][ T8198] usb 2-1: Manufacturer: syz [ 162.538162][ T8198] usb 2-1: SerialNumber: syz [ 162.611542][ T8198] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 10:32:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="b511ca1d57a24500e1d5dea0405024a8a29e7b01b2999b372c7982af15319449bce97e03c9233da56d3ce9058703c85ae9c8a01079f8715d7a4c8a789942bfa5511ca5a44aae56203be433f43aaddf527c47d8ae3cefdde104a8a37b1d79658fc1"], 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000004c0)={@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, {&(0x7f0000000400)=""/96, 0x60}, &(0x7f0000000480), 0x2a}, 0xa0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0xee00) lchown(&(0x7f0000000580)='./file0\x00', r5, 0xee00) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRESHEX=r3]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x100000001) [ 162.788036][ T29] audit: type=1804 audit(1593081127.237:7): pid=8740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir221173962/syzkaller.ch9lv5/25/cgroup.controllers" dev="sda1" ino=15826 res=1 [ 162.828718][ T2474] usb 2-1: USB disconnect, device number 2 [ 162.956559][ T8728] rdma_rxe: rxe_register_device failed with error -23 [ 162.973894][ T8728] rdma_rxe: failed to add ipvlan1 [ 163.033516][ T8727] infiniband syz0: set down [ 163.048422][ T8727] infiniband syz0: added ipvlan1 [ 163.087818][ T8727] infiniband syz0: Couldn't open port 1 [ 163.186228][ T8727] general protection fault, probably for non-canonical address 0xdffffc000000008e: 0000 [#1] PREEMPT SMP KASAN [ 163.197981][ T8727] KASAN: null-ptr-deref in range [0x0000000000000470-0x0000000000000477] [ 163.206389][ T8727] CPU: 0 PID: 8727 Comm: syz-executor.0 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 163.216176][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.226238][ T8727] RIP: 0010:rds_ib_add_one+0xab/0xcb0 [ 163.231609][ T8727] Code: 80 3c 02 00 0f 85 75 0b 00 00 49 8b 9c 24 f0 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 70 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f1 [ 163.251206][ T8727] RSP: 0018:ffffc90001686ff8 EFLAGS: 00010206 [ 163.257270][ T8727] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90001e59000 [ 163.265240][ T8727] RDX: 000000000000008e RSI: ffffffff875e5e48 RDI: 0000000000000470 [ 163.273213][ T8727] RBP: ffff8880a7d44000 R08: ffff88809223e1c0 R09: ffffed1014fa889f [ 163.281183][ T8727] R10: ffff8880a7d444f7 R11: ffffed1014fa889e R12: ffff8880a7d44000 [ 163.289151][ T8727] R13: ffff8880a7d44580 R14: ffff8880a7d444e8 R15: ffffffff875e5de0 [ 163.297120][ T8727] FS: 00007fef051da700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 163.306048][ T8727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.312626][ T8727] CR2: 000055c0f6ef56af CR3: 00000000a7d9b000 CR4: 00000000001406f0 [ 163.320579][ T8727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.328527][ T8727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.336494][ T8727] Call Trace: [ 163.339767][ T8727] ? rds_ib_remove_one+0x270/0x270 [ 163.344853][ T8727] add_client_context+0x400/0x5e0 [ 163.349855][ T8727] ? ib_device_get_by_netdev+0x500/0x500 [ 163.355467][ T8727] enable_device_and_get+0x1cd/0x3b0 [ 163.360726][ T8727] ? add_one_compat_dev+0x800/0x800 [ 163.365900][ T8727] ? rxe_ib_alloc_hw_stats+0xf9/0x130 [ 163.371262][ T8727] ib_register_device+0xa12/0xda0 [ 163.376265][ T8727] ? enable_device_and_get+0x3b0/0x3b0 [ 163.381700][ T8727] ? crypto_create_tfm+0x118/0x2e0 [ 163.386786][ T8727] ? crypto_alloc_tfm+0x124/0x340 [ 163.391787][ T8727] ? ib_device_set_netdev+0x499/0x680 [ 163.397134][ T8727] rxe_register_device+0x50a/0x634 [ 163.402222][ T8727] rxe_add+0x1374/0x180a [ 163.406455][ T8727] rxe_net_add+0x8c/0xe0 [ 163.410674][ T8727] rxe_newlink+0x34/0x90 [ 163.414894][ T8727] nldev_newlink+0x29e/0x420 [ 163.419459][ T8727] ? nldev_set_doit+0x410/0x410 [ 163.424303][ T8727] ? save_trace+0x63f/0xaf0 [ 163.428805][ T8727] ? lock_release+0x800/0x800 [ 163.433461][ T8727] ? apparmor_capable+0x533/0x860 [ 163.438459][ T8727] ? apparmor_capable+0x533/0x860 [ 163.443457][ T8727] ? apparmor_cred_prepare+0x760/0x760 [ 163.448888][ T8727] ? apparmor_cred_prepare+0x760/0x760 [ 163.454326][ T8727] ? cap_capable+0x1eb/0x250 [ 163.458898][ T8727] ? ns_capable_common+0xe2/0x100 [ 163.463899][ T8727] ? nldev_set_doit+0x410/0x410 [ 163.468723][ T8727] rdma_nl_rcv+0x591/0x900 [ 163.473119][ T8727] ? rdma_nl_multicast+0x310/0x310 [ 163.478222][ T8727] ? netlink_deliver_tap+0x227/0xb80 [ 163.483494][ T8727] ? check_preemption_disabled+0x38/0x220 [ 163.489628][ T8727] netlink_unicast+0x537/0x740 [ 163.494392][ T8727] ? netlink_attachskb+0x810/0x810 [ 163.499485][ T8727] ? _copy_from_iter_full+0x25c/0x870 [ 163.504841][ T8727] ? __phys_addr_symbol+0x2c/0x70 [ 163.510804][ T8727] ? __check_object_size+0x171/0x437 [ 163.516069][ T8727] netlink_sendmsg+0x882/0xe10 [ 163.520816][ T8727] ? aa_af_perm+0x260/0x260 [ 163.525311][ T8727] ? netlink_unicast+0x740/0x740 [ 163.530230][ T8727] ? netlink_unicast+0x740/0x740 [ 163.535160][ T8727] sock_sendmsg+0xcf/0x120 [ 163.539564][ T8727] ____sys_sendmsg+0x6e6/0x810 [ 163.544310][ T8727] ? kernel_sendmsg+0x50/0x50 [ 163.548968][ T8727] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 163.554931][ T8727] ___sys_sendmsg+0x100/0x170 [ 163.559590][ T8727] ? sendmsg_copy_msghdr+0x70/0x70 [ 163.564681][ T8727] ? __fget_files+0x277/0x400 [ 163.569351][ T8727] ? lock_downgrade+0x840/0x840 [ 163.574197][ T8727] ? rcu_read_lock_held_common+0xa0/0xa0 [ 163.579812][ T8727] ? check_preemption_disabled+0x38/0x220 [ 163.585517][ T8727] ? __fget_files+0x299/0x400 [ 163.590179][ T8727] ? __fget_light+0x218/0x280 [ 163.594849][ T8727] ? sockfd_lookup_light+0xc6/0x170 [ 163.600034][ T8727] __sys_sendmsg+0xe5/0x1b0 [ 163.604519][ T8727] ? __sys_sendmsg_sock+0xb0/0xb0 [ 163.609526][ T8727] ? check_preemption_disabled+0x38/0x220 [ 163.615238][ T8727] ? do_syscall_64+0x1c/0xe0 [ 163.619810][ T8727] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 163.625764][ T8727] do_syscall_64+0x60/0xe0 [ 163.630159][ T8727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 163.636153][ T8727] RIP: 0033:0x45ca59 [ 163.640032][ T8727] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 163.659618][ T8727] RSP: 002b:00007fef051d9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.668004][ T8727] RAX: ffffffffffffffda RBX: 0000000000500a00 RCX: 000000000045ca59 [ 163.675954][ T8727] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 163.683903][ T8727] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 163.691850][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 163.699802][ T8727] R13: 00000000000009da R14: 00000000004d66a8 R15: 00007fef051da6d4 [ 163.707761][ T8727] Modules linked in: [ 163.989172][ T3590] usb 2-1: new high-speed USB device number 3 using dummy_hcd 10:32:08 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000005, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x60, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14}}}]}]}, 0x60}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x84, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF, @TIPC_NLA_MON_REF={0x0, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x9}]}]}, 0x91}, 0x1, 0x0, 0x0, 0x844}, 0x404c040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004804) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000200)={0x7, 0x800000, "e9b851929f87b95c0b8180a4914423a50332ba1bd2ab9ff7", {0x9, 0x7fff}, 0xffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r6, 0x423, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000300)=0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) [ 164.198737][ T8727] ---[ end trace df32e3ff5542d03b ]--- [ 164.216227][ T8727] RIP: 0010:rds_ib_add_one+0xab/0xcb0 [ 164.228250][ T8727] Code: 80 3c 02 00 0f 85 75 0b 00 00 49 8b 9c 24 f0 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 70 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f1 [ 164.298253][ T8727] RSP: 0018:ffffc90001686ff8 EFLAGS: 00010206 [ 164.313684][ T8727] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90001e59000 [ 164.330563][ T8727] RDX: 000000000000008e RSI: ffffffff875e5e48 RDI: 0000000000000470 10:32:08 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000540)) sendmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x1, @local, 'veth0_vlan\x00'}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="7d3de91dab04bf8c0e397dc0f32c8434cfb6b73fa1c5aebae119b487b7611e236b55196660a1be79f6ee8501a1530bb6b94616aa996a74f75f5178286a9e69b694f8b2e3b55c007ebf9718cb88a253172eed412a43e1347c25aa2227d74f11f1346a5ba429ca64ec91fb7bd4d18ff20a46b9e25b", 0x74}, {&(0x7f0000000680)="53926c3df7f58aa78de55ae4655fcb1626a2be8b0173d9d1b31078d2d3e99522a45cadf52583843084214241f80d6a48a53793add81ed9ee8b57ffde46b3233a328251bcb0c07182372bf4724f37bc8ff7f15aaa437309dc51df8339e15267467ae8e523a4923e58d353f9da168876915072877e7fd5908f05e163f4524467e7263a4fd7212b0c0af3ec76ce719c51de6fefd35d27cc647c53aac49c7cb61482bae5f809cd35f40acc670802cde998c8f6f6f3bf37f6230c0c98ddf1a7b5f4d1ca9fbe5dbb8b4b3e102c5b4f1ae88652d45393587821", 0xd6}], 0x2}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000840)="88fa2b0e3577a496aa8744b143236375a7c55203da8ab1169f3ee30d653d15cf955cee002972824b08401ce6d0aae500260f67b335241aeac8d5ada2605c19abe95f457ae7a35daaddf230971ffe8341df3bca66a8e95972835f198f6cdffa7abc26d793533a65f978dd38dea5c15fed823183ae03a8a93a9d9caa3a5d770a1480a8c32b1821b0fbc4d6dfe01afe3bd5fb3a2ac0438fabc8b992423d8a25027cc839ab3d955f5aca9dbf58de3fc9e46c8b61393288517ef94b", 0xb9}, {&(0x7f0000000900)="6480efd9a0304db1", 0x8}, {&(0x7f0000000940)="5cd8c0a0ca152a9aabfdf577e187db60d19c040432b4ac0935d24d175c4399951949032df29342a31e202b93345aec51d441bf3c9d84b25a9bcf5ef6497376c893ec1506e1c52355ff3ebdcae1c574186a4464685e65cbdbc494cb30a81d41ea53d41835d19367de68da4b153516d40bedc0ffa06d5ff9148369dda3606518da76ea469445bb2be4bbfe008e32bb12e63ede5917dbba46d6d252d07035c24c1224d76ff114", 0xa5}, {&(0x7f0000000a00)="8a6dc76d9175af8895cfcb6fa51c9db7ea941016de9369077450c33e69c55eebe3e634b93bfeec0b461d69328dd63f81c0067f5c6c023c9c16105fc9d5eb6344db6b5490aa1cdc127e05d041aa9bef8a55eec28c2ea5d8883a8843a7ceb2a8f4f9b5f10fd1ea40370da252a986edb9bdd804d14970bc9d64d663ed768cb1348299c5d72f7b5096ddfd006f3d7ccab56db02914170a03cc88a3b3b1ae0ffbac7fbe182309bbe5ef2ddc16a7faffea9259", 0xb0}, {&(0x7f0000000ac0)="24d2e4935db1323b5a5c", 0xa}], 0x5, &(0x7f0000000b80)=[{0x38, 0x103, 0x1, "9fb8f42f4ef32aa7ea78708431bc913f945233c6d71afefc7566fc7df445636e918ef8a78d"}, {0xa0, 0x10b, 0x8, "c6230a5bfe1dbb7e97a5d44bbf7462b262bb7d5652201045e65bc89603f7fb91d6ecb1404f019ddef9fcc34b02ad53d04afe669fc5df0ad4422baea0df5c96e8384e01518b5a8160fbd0e604565baf20762aee36b5e5dd000243e7e4e581d68b5c3eaee76cfadc0d86727190d64f1226d7337d0445bcbd75a2791d28f29b3bfbe38233c384298fb8132e928c0067661d"}, {0x88, 0x10c, 0x2, "15c5daaa617bbc594e7d45ae21f81162479f5b81c6d45927b9138feb861fee66d5689f8a4b059db6710f2a853e563f80ebacae4465fab5376e0f0827d2934ce8fca7a62fdf40e252924b36d36d13553b1fd35cd606fe507b32d7e62072ea5df3beda73458832797472531bfc8d232a800b"}, {0x60, 0x108, 0xd6d3, "c84df28daac837cb988c10bd3088eb91fb90de6a0ee4bb907659103a648506bb9d5c2964dd243e16df4321cbaa9a08d5d15e6ab2c59b75415029bb98622cd4316c05a85169808690673f"}], 0x1c0}}], 0x2, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010100}, "00006371ae9b1c01"}}}}}, 0x0) [ 164.347664][ T8727] RBP: ffff8880a7d44000 R08: ffff88809223e1c0 R09: ffffed1014fa889f [ 164.365954][ T8727] R10: ffff8880a7d444f7 R11: ffffed1014fa889e R12: ffff8880a7d44000 [ 164.384299][ T8727] R13: ffff8880a7d44580 R14: ffff8880a7d444e8 R15: ffffffff875e5de0 10:32:08 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc0045103, &(0x7f0000000000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0xc0045103, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x8}, 0x10089, 0x2, 0x8, 0x7, 0x1, 0x0, 0x100}, r0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0xb74) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="7ffbc0b4bbfd05f1a96a49d47b1160a5bd4f0d5fce1c5cfd6fd3425e4f0c82ffe442ab692280c4765754613ca9cefca6d7cc07fc54281983ba365948cce0161075b64f79e055762d3c967d6b540689d272d79782454cd7c7d386e9fc751785e8e1510845dd22559b9367904744c2f635ddffb8e56d017619b907085676ff60f307b0ad655346ee99edc4d4b8ec825dd8c0f23dbe6a82e01b19abf63ef8baf65d10292f24a5ee20af35cc8b56e61077450c9418efdd9cd01573ac0ea407e7c0be0fced975da7e4db2722d39d194d847db8338ff9deb8e896b130b384434f17c36b6ff816dcfabd483b29b72", 0xeb, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000200)={r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r7, 0x0, 0xa808) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x7c, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20040000) [ 164.437967][ T8727] FS: 00007fef051da700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 164.459121][ T3590] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 164.476737][ T3590] usb 2-1: can't read configurations, error -71 [ 164.500613][ T8727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.533242][ T8727] CR2: 00007ffdabf09b68 CR3: 00000000a7d9b000 CR4: 00000000001406f0 10:32:09 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc0045103, &(0x7f0000000000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0xc0045103, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xab, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x8}, 0x10089, 0x2, 0x8, 0x7, 0x1, 0x0, 0x100}, r0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0xb74) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="7ffbc0b4bbfd05f1a96a49d47b1160a5bd4f0d5fce1c5cfd6fd3425e4f0c82ffe442ab692280c4765754613ca9cefca6d7cc07fc54281983ba365948cce0161075b64f79e055762d3c967d6b540689d272d79782454cd7c7d386e9fc751785e8e1510845dd22559b9367904744c2f635ddffb8e56d017619b907085676ff60f307b0ad655346ee99edc4d4b8ec825dd8c0f23dbe6a82e01b19abf63ef8baf65d10292f24a5ee20af35cc8b56e61077450c9418efdd9cd01573ac0ea407e7c0be0fced975da7e4db2722d39d194d847db8338ff9deb8e896b130b384434f17c36b6ff816dcfabd483b29b72", 0xeb, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000200)={r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r7, 0x0, 0xa808) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x7c, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20040000) 10:32:09 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000540)) sendmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x1, @local, 'veth0_vlan\x00'}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="7d3de91dab04bf8c0e397dc0f32c8434cfb6b73fa1c5aebae119b487b7611e236b55196660a1be79f6ee8501a1530bb6b94616aa996a74f75f5178286a9e69b694f8b2e3b55c007ebf9718cb88a253172eed412a43e1347c25aa2227d74f11f1346a5ba429ca64ec91fb7bd4d18ff20a46b9e25b", 0x74}, {&(0x7f0000000680)="53926c3df7f58aa78de55ae4655fcb1626a2be8b0173d9d1b31078d2d3e99522a45cadf52583843084214241f80d6a48a53793add81ed9ee8b57ffde46b3233a328251bcb0c07182372bf4724f37bc8ff7f15aaa437309dc51df8339e15267467ae8e523a4923e58d353f9da168876915072877e7fd5908f05e163f4524467e7263a4fd7212b0c0af3ec76ce719c51de6fefd35d27cc647c53aac49c7cb61482bae5f809cd35f40acc670802cde998c8f6f6f3bf37f6230c0c98ddf1a7b5f4d1ca9fbe5dbb8b4b3e102c5b4f1ae88652d45393587821", 0xd6}], 0x2}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000840)="88fa2b0e3577a496aa8744b143236375a7c55203da8ab1169f3ee30d653d15cf955cee002972824b08401ce6d0aae500260f67b335241aeac8d5ada2605c19abe95f457ae7a35daaddf230971ffe8341df3bca66a8e95972835f198f6cdffa7abc26d793533a65f978dd38dea5c15fed823183ae03a8a93a9d9caa3a5d770a1480a8c32b1821b0fbc4d6dfe01afe3bd5fb3a2ac0438fabc8b992423d8a25027cc839ab3d955f5aca9dbf58de3fc9e46c8b61393288517ef94b", 0xb9}, {&(0x7f0000000900)="6480efd9a0304db1", 0x8}, {&(0x7f0000000940)="5cd8c0a0ca152a9aabfdf577e187db60d19c040432b4ac0935d24d175c4399951949032df29342a31e202b93345aec51d441bf3c9d84b25a9bcf5ef6497376c893ec1506e1c52355ff3ebdcae1c574186a4464685e65cbdbc494cb30a81d41ea53d41835d19367de68da4b153516d40bedc0ffa06d5ff9148369dda3606518da76ea469445bb2be4bbfe008e32bb12e63ede5917dbba46d6d252d07035c24c1224d76ff114", 0xa5}, {&(0x7f0000000a00)="8a6dc76d9175af8895cfcb6fa51c9db7ea941016de9369077450c33e69c55eebe3e634b93bfeec0b461d69328dd63f81c0067f5c6c023c9c16105fc9d5eb6344db6b5490aa1cdc127e05d041aa9bef8a55eec28c2ea5d8883a8843a7ceb2a8f4f9b5f10fd1ea40370da252a986edb9bdd804d14970bc9d64d663ed768cb1348299c5d72f7b5096ddfd006f3d7ccab56db02914170a03cc88a3b3b1ae0ffbac7fbe182309bbe5ef2ddc16a7faffea9259", 0xb0}, {&(0x7f0000000ac0)="24d2e4935db1323b5a5c", 0xa}], 0x5, &(0x7f0000000b80)=[{0x38, 0x103, 0x1, "9fb8f42f4ef32aa7ea78708431bc913f945233c6d71afefc7566fc7df445636e918ef8a78d"}, {0xa0, 0x10b, 0x8, "c6230a5bfe1dbb7e97a5d44bbf7462b262bb7d5652201045e65bc89603f7fb91d6ecb1404f019ddef9fcc34b02ad53d04afe669fc5df0ad4422baea0df5c96e8384e01518b5a8160fbd0e604565baf20762aee36b5e5dd000243e7e4e581d68b5c3eaee76cfadc0d86727190d64f1226d7337d0445bcbd75a2791d28f29b3bfbe38233c384298fb8132e928c0067661d"}, {0x88, 0x10c, 0x2, "15c5daaa617bbc594e7d45ae21f81162479f5b81c6d45927b9138feb861fee66d5689f8a4b059db6710f2a853e563f80ebacae4465fab5376e0f0827d2934ce8fca7a62fdf40e252924b36d36d13553b1fd35cd606fe507b32d7e62072ea5df3beda73458832797472531bfc8d232a800b"}, {0x60, 0x108, 0xd6d3, "c84df28daac837cb988c10bd3088eb91fb90de6a0ee4bb907659103a648506bb9d5c2964dd243e16df4321cbaa9a08d5d15e6ab2c59b75415029bb98622cd4316c05a85169808690673f"}], 0x1c0}}], 0x2, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010100}, "00006371ae9b1c01"}}}}}, 0x0) [ 164.559457][ T26] tipc: TX() has been purged, node left! [ 164.576375][ T8727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 10:32:09 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000005, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x60, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14}}}]}]}, 0x60}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x84, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF, @TIPC_NLA_MON_REF={0x0, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x9}]}]}, 0x91}, 0x1, 0x0, 0x0, 0x844}, 0x404c040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004804) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000200)={0x7, 0x800000, "e9b851929f87b95c0b8180a4914423a50332ba1bd2ab9ff7", {0x9, 0x7fff}, 0xffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r6, 0x423, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000300)=0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) 10:32:09 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000540)) sendmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x1, @local, 'veth0_vlan\x00'}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="7d3de91dab04bf8c0e397dc0f32c8434cfb6b73fa1c5aebae119b487b7611e236b55196660a1be79f6ee8501a1530bb6b94616aa996a74f75f5178286a9e69b694f8b2e3b55c007ebf9718cb88a253172eed412a43e1347c25aa2227d74f11f1346a5ba429ca64ec91fb7bd4d18ff20a46b9e25b", 0x74}, {&(0x7f0000000680)="53926c3df7f58aa78de55ae4655fcb1626a2be8b0173d9d1b31078d2d3e99522a45cadf52583843084214241f80d6a48a53793add81ed9ee8b57ffde46b3233a328251bcb0c07182372bf4724f37bc8ff7f15aaa437309dc51df8339e15267467ae8e523a4923e58d353f9da168876915072877e7fd5908f05e163f4524467e7263a4fd7212b0c0af3ec76ce719c51de6fefd35d27cc647c53aac49c7cb61482bae5f809cd35f40acc670802cde998c8f6f6f3bf37f6230c0c98ddf1a7b5f4d1ca9fbe5dbb8b4b3e102c5b4f1ae88652d45393587821", 0xd6}], 0x2}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000840)="88fa2b0e3577a496aa8744b143236375a7c55203da8ab1169f3ee30d653d15cf955cee002972824b08401ce6d0aae500260f67b335241aeac8d5ada2605c19abe95f457ae7a35daaddf230971ffe8341df3bca66a8e95972835f198f6cdffa7abc26d793533a65f978dd38dea5c15fed823183ae03a8a93a9d9caa3a5d770a1480a8c32b1821b0fbc4d6dfe01afe3bd5fb3a2ac0438fabc8b992423d8a25027cc839ab3d955f5aca9dbf58de3fc9e46c8b61393288517ef94b", 0xb9}, {&(0x7f0000000900)="6480efd9a0304db1", 0x8}, {&(0x7f0000000940)="5cd8c0a0ca152a9aabfdf577e187db60d19c040432b4ac0935d24d175c4399951949032df29342a31e202b93345aec51d441bf3c9d84b25a9bcf5ef6497376c893ec1506e1c52355ff3ebdcae1c574186a4464685e65cbdbc494cb30a81d41ea53d41835d19367de68da4b153516d40bedc0ffa06d5ff9148369dda3606518da76ea469445bb2be4bbfe008e32bb12e63ede5917dbba46d6d252d07035c24c1224d76ff114", 0xa5}, {&(0x7f0000000a00)="8a6dc76d9175af8895cfcb6fa51c9db7ea941016de9369077450c33e69c55eebe3e634b93bfeec0b461d69328dd63f81c0067f5c6c023c9c16105fc9d5eb6344db6b5490aa1cdc127e05d041aa9bef8a55eec28c2ea5d8883a8843a7ceb2a8f4f9b5f10fd1ea40370da252a986edb9bdd804d14970bc9d64d663ed768cb1348299c5d72f7b5096ddfd006f3d7ccab56db02914170a03cc88a3b3b1ae0ffbac7fbe182309bbe5ef2ddc16a7faffea9259", 0xb0}, {&(0x7f0000000ac0)="24d2e4935db1323b5a5c", 0xa}], 0x5, &(0x7f0000000b80)=[{0x38, 0x103, 0x1, "9fb8f42f4ef32aa7ea78708431bc913f945233c6d71afefc7566fc7df445636e918ef8a78d"}, {0xa0, 0x10b, 0x8, "c6230a5bfe1dbb7e97a5d44bbf7462b262bb7d5652201045e65bc89603f7fb91d6ecb1404f019ddef9fcc34b02ad53d04afe669fc5df0ad4422baea0df5c96e8384e01518b5a8160fbd0e604565baf20762aee36b5e5dd000243e7e4e581d68b5c3eaee76cfadc0d86727190d64f1226d7337d0445bcbd75a2791d28f29b3bfbe38233c384298fb8132e928c0067661d"}, {0x88, 0x10c, 0x2, "15c5daaa617bbc594e7d45ae21f81162479f5b81c6d45927b9138feb861fee66d5689f8a4b059db6710f2a853e563f80ebacae4465fab5376e0f0827d2934ce8fca7a62fdf40e252924b36d36d13553b1fd35cd606fe507b32d7e62072ea5df3beda73458832797472531bfc8d232a800b"}, {0x60, 0x108, 0xd6d3, "c84df28daac837cb988c10bd3088eb91fb90de6a0ee4bb907659103a648506bb9d5c2964dd243e16df4321cbaa9a08d5d15e6ab2c59b75415029bb98622cd4316c05a85169808690673f"}], 0x1c0}}], 0x2, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010100}, "00006371ae9b1c01"}}}}}, 0x0) [ 164.644356][ T8727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.689940][ T8727] Kernel panic - not syncing: Fatal exception [ 164.697584][ T8727] Kernel Offset: disabled [ 164.701901][ T8727] Rebooting in 86400 seconds..