Warning: Permanently added '[localhost]:22294' (ECDSA) to the list of known hosts. 2020/12/10 14:02:06 fuzzer started 2020/12/10 14:02:07 dialing manager at 10.0.2.10:35713 2020/12/10 14:02:07 syscalls: 3453 2020/12/10 14:02:07 code coverage: enabled 2020/12/10 14:02:07 comparison tracing: enabled 2020/12/10 14:02:07 extra coverage: enabled 2020/12/10 14:02:07 setuid sandbox: enabled 2020/12/10 14:02:07 namespace sandbox: enabled 2020/12/10 14:02:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/10 14:02:07 fault injection: enabled 2020/12/10 14:02:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/10 14:02:07 net packet injection: enabled 2020/12/10 14:02:07 net device setup: enabled 2020/12/10 14:02:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/10 14:02:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/10 14:02:07 USB emulation: enabled 2020/12/10 14:02:07 hci packet injection: enabled 2020/12/10 14:02:07 wifi device emulation: enabled 14:03:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "99eee6d99a9a3eda4ef8812df6a383ea40ca5b06a98ec0e5b6ffe5e64f0d57a9", "175d99a3efbddcc4f08ce795122f34cb43b605ff71f0df76c596a072e13d778c"}}}]}, 0x268}}, 0x0) 14:03:27 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x0) 14:03:28 executing program 2: rename(&(0x7f0000000400)='./file0\x00', 0xfffffffffffffffe) 14:03:28 executing program 3: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) syzkaller login: [ 192.865742][ T9032] IPVS: ftp: loaded support on port[0] = 21 [ 192.947454][ T9032] chnl_net:caif_netlink_parms(): no params data found [ 192.987697][ T9034] IPVS: ftp: loaded support on port[0] = 21 [ 193.032647][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.043418][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.055367][ T9032] device bridge_slave_0 entered promiscuous mode [ 193.068144][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.078240][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.089156][ T9032] device bridge_slave_1 entered promiscuous mode [ 193.114906][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.130099][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.161680][ T9032] team0: Port device team_slave_0 added [ 193.171986][ T9032] team0: Port device team_slave_1 added [ 193.212029][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.224528][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.265437][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.285222][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.295426][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.336562][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.363837][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 193.386708][ T9038] IPVS: ftp: loaded support on port[0] = 21 [ 193.405244][ T9036] IPVS: ftp: loaded support on port[0] = 21 [ 193.423746][ T9032] device hsr_slave_0 entered promiscuous mode [ 193.435099][ T9032] device hsr_slave_1 entered promiscuous mode [ 193.525092][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.536334][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.551129][ T9034] device bridge_slave_0 entered promiscuous mode [ 193.563583][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.574936][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.586463][ T9034] device bridge_slave_1 entered promiscuous mode [ 193.649110][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.686885][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.720961][ T9034] team0: Port device team_slave_0 added [ 193.733403][ T9034] team0: Port device team_slave_1 added [ 193.744776][ T9036] chnl_net:caif_netlink_parms(): no params data found [ 193.808548][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.819352][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.860420][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.881173][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.892404][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.954596][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.999753][ T9038] chnl_net:caif_netlink_parms(): no params data found [ 194.022213][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.035687][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.048120][ T9036] device bridge_slave_0 entered promiscuous mode [ 194.073952][ T9034] device hsr_slave_0 entered promiscuous mode [ 194.084564][ T9034] device hsr_slave_1 entered promiscuous mode [ 194.095192][ T9034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.107750][ T9034] Cannot create hsr debugfs directory [ 194.116356][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.127283][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.139088][ T9036] device bridge_slave_1 entered promiscuous mode [ 194.172427][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.195632][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.225449][ T9036] team0: Port device team_slave_0 added [ 194.235714][ T9032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.261305][ T9036] team0: Port device team_slave_1 added [ 194.273949][ T9032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.302211][ T9032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.317181][ T9032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.331792][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.342535][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.383905][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.402592][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.414274][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.425766][ T9038] device bridge_slave_0 entered promiscuous mode [ 194.439608][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.451082][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.462392][ T9038] device bridge_slave_1 entered promiscuous mode [ 194.475702][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.487022][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.526805][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.574405][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.595497][ T9036] device hsr_slave_0 entered promiscuous mode [ 194.610553][ T9036] device hsr_slave_1 entered promiscuous mode [ 194.622811][ T9036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.638834][ T9036] Cannot create hsr debugfs directory [ 194.653802][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.682166][ T9038] team0: Port device team_slave_0 added [ 194.706363][ T9038] team0: Port device team_slave_1 added [ 194.736723][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.748079][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.789305][ T9038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.813496][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.826226][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.866162][ T9038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.888975][ T1720] Bluetooth: hci0: command 0x0409 tx timeout [ 194.930159][ T9038] device hsr_slave_0 entered promiscuous mode [ 194.940267][ T9038] device hsr_slave_1 entered promiscuous mode [ 194.950780][ T9038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.963390][ T9038] Cannot create hsr debugfs directory [ 194.983835][ T9034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.004480][ T9034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.028106][ T3353] Bluetooth: hci1: command 0x0409 tx timeout [ 195.028954][ T9034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.052139][ T9034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.122091][ T9036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.135296][ T9036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.148671][ T9036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.175805][ T9036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.222833][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.257608][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.270525][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.278338][ T3353] Bluetooth: hci2: command 0x0409 tx timeout [ 195.285442][ T9038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.305770][ T9038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.319822][ T9038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.334422][ T9032] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.353191][ T9038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.374567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.391029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.403455][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.414401][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.428706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.430323][ T18] Bluetooth: hci3: command 0x0409 tx timeout [ 195.446145][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.462772][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.475671][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.486369][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.503223][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.521817][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.549847][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.574718][ T9034] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.589314][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.605854][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.621520][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.635246][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.649023][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.661890][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.676664][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.694307][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.709344][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.730685][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.743594][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.756737][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.768523][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.780763][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.794361][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.807221][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.821376][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.841309][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.853143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.865934][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.880896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.898684][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.915018][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.937566][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.955896][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.970306][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.983407][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.996667][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.013574][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.035041][ T9036] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.045286][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.057719][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.069675][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.081239][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.094051][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.108458][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.131459][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.144944][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.162137][ T9032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.174999][ T9034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.189734][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.202951][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.215599][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.226921][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.244298][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.272320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.285210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.301239][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.312164][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.324616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.339079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.358342][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.374328][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.388260][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.403086][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.415277][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.427222][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.443589][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.456753][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.475904][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.492368][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.506697][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.519674][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.532452][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.545152][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.559107][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.576419][ T9038] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.593752][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.608196][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.622381][ T9036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.652888][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.665904][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.679498][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.690639][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.702793][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.715737][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.728684][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.739266][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.750589][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.762763][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.776948][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.789515][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.801801][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.817085][ T9032] device veth0_vlan entered promiscuous mode [ 196.842004][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.857102][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.870640][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.892306][ T9032] device veth1_vlan entered promiscuous mode [ 196.907539][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.919708][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.939076][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.950386][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.958139][ T18] Bluetooth: hci0: command 0x041b tx timeout [ 196.968499][ T9034] device veth0_vlan entered promiscuous mode [ 196.984940][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.997035][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.010517][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.023885][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.041174][ T9034] device veth1_vlan entered promiscuous mode [ 197.053189][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.066187][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.079017][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.095350][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.108066][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 197.127395][ T9038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.145269][ T9038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.173479][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.185489][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.201327][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.218710][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.239784][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.255208][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.270781][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.285607][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.300068][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.316848][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.342129][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.354498][ T69] Bluetooth: hci2: command 0x041b tx timeout [ 197.358204][ T9032] device veth0_macvtap entered promiscuous mode [ 197.389944][ T9032] device veth1_macvtap entered promiscuous mode [ 197.409223][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.427268][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.443302][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.471142][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.484672][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.501575][ T9034] device veth0_macvtap entered promiscuous mode [ 197.508086][ T18] Bluetooth: hci3: command 0x041b tx timeout [ 197.515083][ T9038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.543367][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.556462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.568971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.582140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.596290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.613425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.633946][ T9034] device veth1_macvtap entered promiscuous mode [ 197.652247][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.669114][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.680214][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.691851][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.710188][ T9032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.722679][ T9032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.734989][ T9032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.747661][ T9032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.774989][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.786823][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.800264][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.811159][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.823607][ T9036] device veth0_vlan entered promiscuous mode [ 197.840187][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.858621][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.885800][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.904945][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.926689][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.947083][ T9036] device veth1_vlan entered promiscuous mode [ 197.963486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.975626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.993029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.013275][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.034324][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.055637][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.091515][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.107807][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.127376][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.149078][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.166695][ T9034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.180334][ T9034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.194605][ T9034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.208583][ T9034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.231528][ T9038] device veth0_vlan entered promiscuous mode [ 198.243044][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.264456][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.282807][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.311526][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.335445][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.341907][ T9038] device veth1_vlan entered promiscuous mode [ 198.378205][ T9036] device veth0_macvtap entered promiscuous mode [ 198.390770][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.403544][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.420182][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.433888][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.471486][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.477179][ T9059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.484919][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.499829][ T9059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.511209][ T9036] device veth1_macvtap entered promiscuous mode [ 198.537574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.549356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.564363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.576143][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.583745][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.587591][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.615365][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.638595][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.658752][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.684375][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.697411][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.710068][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.725357][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.742747][ T9032] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 198.745818][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.784342][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.803614][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 14:03:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4010000100013070000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000020000000000000000000000c400140073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0"], 0x1b4}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) [ 198.826105][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.847137][ T9072] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.853479][ T9072] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.868550][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_1 14:03:35 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) [ 198.903353][ T9036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.918860][ T9036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 14:03:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0) [ 198.933998][ T9036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 14:03:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) [ 198.957044][ T9036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.973888][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.986884][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:03:35 executing program 0: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 14:03:35 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='trusted\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) [ 199.020866][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.043665][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.062036][ T3082] Bluetooth: hci0: command 0x040f tx timeout [ 199.076214][ T9038] device veth0_macvtap entered promiscuous mode [ 199.100966][ T9038] device veth1_macvtap entered promiscuous mode [ 199.131439][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.132129][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.146757][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.162206][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.190175][ T34] Bluetooth: hci1: command 0x040f tx timeout [ 199.198247][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.221736][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.237922][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.254970][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.277095][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.292725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.305088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.316850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.328391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.341151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.369963][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.388927][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.404817][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.424197][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.441093][ T3082] Bluetooth: hci2: command 0x040f tx timeout [ 199.450920][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.467181][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.483672][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.499077][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.512694][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.529546][ T9096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.532071][ T9038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.541741][ T9096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.554565][ T9038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.578782][ T9038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.593246][ T34] Bluetooth: hci3: command 0x040f tx timeout [ 199.598413][ T9038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.627638][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.674050][ T9096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 14:03:35 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) [ 199.696973][ T9096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.709116][ T9059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.711482][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.723511][ T9059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.765564][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:03:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000040)) 14:03:36 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x145042, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="0a002000010000000000000000000000008a980000000000000020"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}}, 0x10) pwritev(r1, &(0x7f0000000080), 0xc3, 0x0, 0x0) 14:03:36 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x220040, 0x0) 14:03:36 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') 14:03:36 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000000c0), 0x4) 14:03:36 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') 14:03:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x101}, 0x14}}, 0x0) 14:03:36 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') [ 199.869181][ T46] audit: type=1800 audit(1607609016.051:31): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file1" dev="sda1" ino=16551 res=0 errno=0 14:03:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002840)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000002880), 0x4) 14:03:36 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0xe8ba, 0x0) 14:03:36 executing program 0: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:03:36 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x2000001) 14:03:36 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') [ 199.947303][ T46] audit: type=1800 audit(1607609016.051:32): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file1" dev="sda1" ino=16551 res=0 errno=0 14:03:36 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 14:03:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_settime(0x0, &(0x7f00000001c0)={0x0, 0x989680}) 14:03:36 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 14:03:36 executing program 1: r0 = getpid() tkill(r0, 0x17) 14:03:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0xdfb09873baee652, 0x0, 0x0) 14:03:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002c00010000000000018000"/24, @ANYBLOB="07009e4e3000456105b7e3"], 0x24}}, 0x0) 14:03:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b40001"], 0xb4}}, 0x0) 14:03:36 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) 14:03:36 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='batadv0\x00') 14:03:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[], 0x394}}, 0x0) 14:03:36 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000100)=""/76, 0x4c}], 0x2}, 0x20) 14:03:36 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000040)) 14:03:36 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000001000000ffff81"], 0x0) 14:03:36 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4) 14:03:36 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r1, &(0x7f0000000200)="2e038696dd2bb01e64597bf826269b4acc38b3e403dce89415534727e659b822d311894e07668907b924974db8ac4e61b2ded12f96cb3c1af8d5bd466545174136e0f16323795a32e41d6865bd14fe637617b9ef0e8b815dd3587d13998584feda27165823e3fe7f8f4dd730a0b9cfc428b34ed7c60b6d7b9f76dc2af526952bbc3f2c7012d5d077fe6a776bf91eab745c15ba3d", 0xffffff46}]) 14:03:36 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000004780)='/dev/uinput\x00', 0x2, 0x0) 14:03:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000041, 0x0) 14:03:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$RTC_PLL_SET(r1, 0x40207012, 0x0) 14:03:36 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004640)={'wg1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', {}, 0x80}) 14:03:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000019001100000010000000000002"], 0x18}}, 0x0) 14:03:36 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004640)={'wg1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', {}, 0x80}) 14:03:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x2}, {0x8}]}, 0x10) 14:03:36 executing program 1: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0xffffffffffffffff, 0xee00, 0xee01}}) 14:03:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b40000000272b1"], 0xb4}}, 0x0) 14:03:36 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004640)={'wg1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', {}, 0x80}) 14:03:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x28}}, 0x0) 14:03:36 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x48, 0x4) 14:03:36 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004640)={'wg1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', {}, 0x80}) 14:03:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x30) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000002b8, 0x0) 14:03:36 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4094, 0xffe}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) 14:03:36 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000080)) 14:03:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{}, "da465eb3b92d77da", "f3ee72d3d2973f67cdfeac42ffc31254da379c7bc99ffc0fc62753027ce5bd5a", "57af8153", "2937d335a5f5c676"}, 0x38) 14:03:36 executing program 0: clock_gettime(0x0, &(0x7f00000005c0)) 14:03:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:03:36 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x400c0, 0x0) 14:03:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:03:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x30) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000002b8, 0x0) 14:03:37 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x240000, 0x0) 14:03:37 executing program 0: rt_sigaction(0x35, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 14:03:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:03:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x30) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000002b8, 0x0) 14:03:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:03:37 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x28a080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x30}}, 0x24000000) [ 201.108554][ T34] Bluetooth: hci0: command 0x0419 tx timeout 14:03:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xed}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:03:37 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000040)) 14:03:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, 0x1, 0x8, 0x201}, 0x14}}, 0x0) 14:03:37 executing program 2: socket(0x0, 0x5e46c48adb52b25e, 0x0) 14:03:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x1, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x0) [ 201.278232][ T34] Bluetooth: hci1: command 0x0419 tx timeout 14:03:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}}, 0x0) 14:03:37 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x900c0, 0x0) 14:03:37 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 14:03:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x30) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000002b8, 0x0) 14:03:37 executing program 0: timer_create(0x4, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 14:03:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000), 0x0) 14:03:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000100)={0xec4, 0xd, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xea8, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xef8a}, @NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "1c8a7f7704e6994a00675efb8d10a61a4e5ee742a394b11374588643fcca3da815b483c7ca6c4cc45043dd8f11596068b18632ea86000d9a8b291e57abb53aedf0a3f6a6875905b5e565bd0a33609180749f15dd2c66f54833588a53c17b707eb2248dfd0ee51e8bbb5f5c88b5a2296c825922606d190ae5f8149903878618c934704f24d308501f93f0a107cbd068461d0ae032749e07442fa70a9762509213b689a56beb4c0f76297315ffabb96ac949da44feb1fe5ed5a1b1cdfef4873efa86"}]}]}, {0x4b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_DATA={0x264, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "b069d1986dbbad14fd00749a017d73d73f8a93a5ece03997dcd870268c6bcbaa74bc37b5b77d36af5b39902d9135171640b78789faf44a5cf2c7a87927abcfc76fe3a9975d80369853eb23b92071e8cd370a6025bb55f694f3f3dff8d0e998728d673399c29cbc190f4714ee7a401cecc3f1da5dceede1f9939d61aa4b08081cca774affe8e0d88b350a6108ffb9ad46907b98f645b414baa3a41eaaec010ccb2d1f16bf601f1978ca8d6d5248b1df3b"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x57, 0x1, "3a37e78938eb9c2ca070b2bc4491012b1368a00eec6487789a6e9073644a9b4d3f6c7cb85a79ef10944f8271faa47955ecc8c1527f9e1db85ab7064580ca1286280667653c1eea7860709883fbf54b70671758"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x91, 0x1, "46d69e5a6997826e116b6f3c45ea5b3f78762811a64b62508e7aedd3dbfe92cdd2f3dc556eb0479565a29a1b4322e8e40456771725346d2504dd46043595ad77bfe1b0fd1b61ac2e55bdab574cc3d526d25379aa390a37d984b7cb98718f7d6ccf6b4bb50d97100b9c689cf82f04135b643699c0e329e920339d3cee25cc2e26998bcd9e93dd003cae2c772bb0"}]}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "d1198063b93d8603dbc7ec50b27709373085ae32635f25af57c11aba82a5a43e5d521297b2dc7c39397ca7119c769ae22b74"}]}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1dc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "d6b5e128c7df8ef0603169476a281911aaa7c413df4ac0efe5714fcf92aaf292c0850340483ee9b3012b95ef5c8b6167e1"}, @NFTA_DATA_VALUE={0xb5, 0x1, "6f873b8137eb47679565d67f152e9366363cebda274b7165fc30c1b5f118da4dd451df6c2ef0a42f9cf6b3f6b9ff9d471371b37d05035ec805c08c32a072450ce2214aa0fce78bba10b448d5a8954282113a309d6dbae701e22a32c25f1c0888538b06956bf945356f23bed26479847ff3fc8ad70004b73115c49f630ad438bedb532851f2872fb4362f61d1cc3928be1019bd38fbb15d78142ac65fedea460bd6926170c68d914c17703b4c52da5ecaf8"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "adf0d24700d7e0a9d85207bbb84fdcc7d01e047a4848db109e57e482a14db34e9f5c4b19dd782188a280e0579634b0fec519717675dd9f87d9855d63343cea0b21b496c3113ef2f3f203f99a63712d393a371cd1d42d752574f32086dfa6ecd9b7e22db125383b8cd7e5360d8acc08c0266b6b05d6f8331e32f040ddf3896587d157407b091c60ae69c6dcfc5d09b71de45da2acd3d77b7f59ac536deaea3d221e"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x904, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x8f1, 0x6, 0x1, 0x0, "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"}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x45}, 0x40010) 14:03:37 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r2 = memfd_create(&(0x7f0000000040)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18181b, 0x0) sendfile(r1, r2, 0x0, 0x200000f) 14:03:37 executing program 2: r0 = msgget(0x3, 0x21c) msgctl$IPC_RMID(r0, 0x0) 14:03:37 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/10, 0xa) 14:03:37 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$assume_authority(0x10, r0) [ 201.402421][ T46] audit: type=1800 audit(1607609017.577:33): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file0" dev="sda1" ino=16565 res=0 errno=0 14:03:37 executing program 2: r0 = msgget(0x3, 0x21c) msgctl$IPC_RMID(r0, 0x0) 14:03:37 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)=0x3c) [ 201.538836][ T34] Bluetooth: hci2: command 0x0419 tx timeout 14:03:37 executing program 2: r0 = msgget(0x3, 0x21c) msgctl$IPC_RMID(r0, 0x0) 14:03:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000015000100000000000000000002000000114f"], 0x18}}, 0x0) [ 201.678202][ T34] Bluetooth: hci3: command 0x0419 tx timeout 14:03:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x5}, 0x14}}, 0x0) 14:03:37 executing program 2: r0 = msgget(0x3, 0x21c) msgctl$IPC_RMID(r0, 0x0) 14:03:37 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r2 = memfd_create(&(0x7f0000000040)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18181b, 0x0) sendfile(r1, r2, 0x0, 0x200000f) [ 201.705327][ T46] audit: type=1800 audit(1607609017.877:34): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16565 res=0 errno=0 14:03:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 14:03:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 14:03:37 executing program 1: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 201.787713][ T46] audit: type=1800 audit(1607609017.957:35): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file0" dev="sda1" ino=16565 res=0 errno=0 14:03:38 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0) 14:03:38 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) listen(r0, 0x80000000) 14:03:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)='o', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000740)='m', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c40)='.', 0x1}, {&(0x7f0000001d00)='r', 0x1}, {&(0x7f0000001dc0)="c2", 0x1}, {&(0x7f0000001e80)="ac", 0x1}, {&(0x7f0000001f00)="f3", 0x1}, {&(0x7f0000001fc0)="7468448e15d767e4addca2d66cf105ca80748b11d18314d6f8cac03ce57ccfc9de88baaa95855eb7fb46aa37bd6581590fbcaa17961a66653ddd9c3322c3fabda0", 0x41}], 0x6}, 0x11000000}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002100)="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", 0xf01}], 0x1}}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000003340)="a6", 0x1}, {&(0x7f00000033c0)="2c6d6ebf87c1b9acbbaabcbc5c2973f1a2ced3310f261f116454ebd5e632c5750d37bc8db1283d7cac8cfc49f5a7b0ccd1885d3017a5d6acde363d98d1eb7a738d069e66f130bd48b69aa1e532719e830fe54e424bc7eea2cc7df147fe70612c1ca0f7747bf1832a7ac0a8c0337e46ebddbbfd94a19dae2966c180a54a2e881391ce46ea4795446bd095c06d3643461240ba555136fa09dbc93bb9f1d876258546847f3006425596c66fb0170680f18fca41c01e49183ef54f6e3e923ddda2795b27de66f9765f956645d6db7e846e2456dd230c70c77f7a9e9cf0408ff02ccf41c04bad758af015cf253b1ddc4a3ca6aa059d8b4425284a3aa03de60385142647063d49ab8dbb4b74990b983a18644e5333cca77d4eef82db4496dcf7d2062b6d655eb9d63b786a451a909cbca2e1a107ed7b8c12f8670701334821aa6033074f233838ce10a920625140914a0f21c45a312d3b55a918cc9d82c82e6f5d60932f2ca735b32285b8462b0db37f029649e03494b2e6e7bc330c9419a7368e486460d0cae96ca262fd3f52c61b67366a7c27361c14945354d408f6cee2b9dd882433fff535a1ceabc832ac176e0b77f5470f80f170fdcddbf1e1d23b5961ce4c915ff3e36c480ba8309e18b7eadff8b098c6c2aba81310f83d75324626433971edd76c2276c1c63cdc609f0d96c593a82c975ed93b124ff4e42b0b615d18f7a5d970ad51c69116748e1baad4f2d50518390ab39aaf988ec597d22c07647caa362bce90758a8d5918d0bada7f94541d9663376ac8063faf889c98d986ad33ba9eaf10987662044f611678d00fbccc1a9e3c9c57acc48d8f855326fea047b9fc3b4e31c8f1b4fd0e55d3775a3f2458e34f0362035db75cd234e90d3200f3e54477a3819dc146da246369c008dd0e4fe65b1aedbd01e18f424f40347dea9707e1aaf883c69c0e44529b0a6ea9db01545861980a824141fd9071774524f416df6da312e806f46c6280f755b28a926ed7a7ba294d5c88840af7340ef21fbe0118670b42670cadf33e587cc8d2369f7c698a4bb1a82dbd5870caa105181a91e60dea18eeb0178ee07e68e6bb54db2268de09876f1a31cc9adfcf0bc4fc593d12d0787f7361e81a9326f7242cdca80785e9ebce8d09f19ce5520cd3b66cab1a0e8481edd72482173e9030c457c1d3f763f7706048b4ad23ba882c999cb6b5b71241e041e642d9a0575149dbfaec3197da601e4a8f81fe706f03ec9131180e3736f75e0ebc68c0bc33f2d43c79049ecfbc95c6e57e91fd29d43e412c659c0829886e83edaa3d26f6d0f13863b292750e34a729a6042ab002f1b75c1e398d36d74b5eb5eb90c5b2b7f5638249b8a352d7731875b684467cb8db541eb403e9cb32c8fd200c1afa1746f4276df47460b83b253883e4337884204246932c84bea118595af2ae7fb19e625f271b92d4b230899d5d0232286fa1888bad595ac78d8f3484362b9be662fe9e15a687ffaaddb4441c0a811145360d912da41e349a5e22ce4bbf5ad8a6f92b675eac8fe934567942dfa12cad8535fdbe2a8d8514ef6223310f5b9c4ad1f60574b4d1fdbbb4478ba78d18591a4b99dc8939e616e0ad26f39513849649191ff788fec91bbc4b0c97a28b548dc2462731c7fce37a70d5528a4b03773475f517075f2d23a058a436abc4f6a30dbf8901eaea8360778c89b033bdc831e377d7cd1c65ff000d309593cc5b2f2eaeb94e94226914c8976b56eaa345bdb79019382107c29300b888740bc7da82ae583bfad8fcf9d63677ad29f14b504207e27c67f915926594e19d9a2d9aa26db1bb8ab902f2df5fef9893d7f8a646680b01141a2e630eea0ca5ae0c521ffe0c2cf055e942eb83a80cdb96f2c99cb65d8415c37851e300d08520e707d0fe9f37d50b0c81d3b784d7294d94024fe85f4fcaba1b5e9cc3de3c92734069cb858b1019e20c6503c2a05384ddc2b80e849d780597cc7b34b370af310b43bd552e797efe5324530abcdddb0b9dd229f626a6270c4164e6c83e6f582ca7d132a849ee4273d77d2aa33bc2e85abd3c0e59edbe06d6e4f30263a2413bcd3b7279ba470e1de67c72f9d53e8b68eb913f48a4ca03528e3d6b210f51565be805116ff4b960db839d0faa354bdb01d52c1d247d355048059c037920cecceb0e9a29409f0080f76bade7a617fc0749c1b31b2bd105e601229d4c4f6bbae742e23850362ad0195edec1855a97e73e6309c0a998d784e8fb2c390b500089dfab15004ff7ab04c1efe068493bfc72264663b1a5a6a8e958f92a848bbd1f3516abf3bb214632d886bd51fce28a00254f8c96ec3bcef8ff0ac13cb5c86f63a1d747db84879f6c53a1a7f917dd0388c6e114f5db0347e0237939d9d7f91e7e721b896af5d229a238064754bac69ae48768fddd41973455da5949debda9733017ef93e51572839a017ad65ff1308ddeeddc2852ade8986d505a92b4309592f05e3c5584a8dd4be0465657e050839253d64d3ad659da64fa3fbcd70ff99326b19478ffa12dd053d0422bf355c42604630a522c639b23da735cc9b1dae284b5c27dfb0757f149aef72c3515afdbece072d5ceb0da4d8e3bda708dd1eff7f9a6615a7b3e1b9235b55fb10797546833e34cfa5f1622c32a4143fb47c9d15ccf43508fd7bb28014cd2404a560ab5b43d8daffe95054387931aed794091be651711ee0f105b3245f88deef70c36b2919e0b5ae649e3227176513b22b025bdbc8f2ee688966734b56c76a07f5b4f44e558ccd5024944d6fff721120288d0027018635dc2c4fb701eaa62bae1eb732ceb22ac36d06b7470a7cd8107377a806e2c6d64414f9d0d34956b3dc7e6cf59e6d8839f4fcd3a48f356d1d371866e629945374cd1c32f79e2a88b83ade98230af8d243761747dd3bcdd3c2a418f4802d849c68aa7a4452068d514de228179b02d4ddb5af34ee5e799963aed79fa7fc3521afdfb31c930b6b5ebbd83f43a4b116ffea22ff13d5b506b39b7b3eab0fa0c3457e153b218e56db04c03c941c3f3b276b903e73f58d8986e432c1dd8274b79a70104a9479741773e94bebdeb07d81f5343c0aef82d721a1bdbddd012d6f2396fbde19f9439915fe471692155fd11918d06f88ca10dcff918da5b1460f87985d3d0a27802ebae3d00f8462afa98c0d9cde4fb1989ac4f5be7abeca362c4a22828f45a864d0d1846f8f8473ad4a9df73974b2ff62b22636b72da374b614120a830e0f602116a57a43dc580740c77cec21c60df1bd43ac00dbb79dde15d073261ed5800544e510862e92f61d62cbc65a8f408d6a57783cd98cd506e812f7d142de1c2dfccb830a46a8f76e11b34cf526014d5ac51d27f03070f8f4fb8c3b1125b0b022554c46a3cfd7e3b8c87f516a34fd05b5c445e05454809d42677260a75ce95fb6ec5643a5f308ab8f2234a0d3cfb5594e2767e15471bc5cdcf982d79d8c7164cea2208736b8dac51903d82196e47a1a2a02e99f34fb4220fb2ac1d9cc6e3ed5d49491b78c8f7fb65ad9b5fb7022e3a115d527698f1f1c4941333a43a297e3fe4f5e9289a0881a0e039da9a6efb55b9c7ffb46c97f13ab86f49825c84ce9c30277a167fc1899820df51d7cabd90658e88accb055bae2ea334e792779448d03335c43dde9835312b65dc97c2497b5f4c10053625bac67809b7b0690da63cd4d4616d17f41490012d398e3568fed6fb0665622e99f27897c1614a53a1a232eca54b227e1401f8e5af9b12fda145e1c1e82f3987c8413ef9dbba66cd163e197b9997e504e9a425ad1e1db248f89fbaa21b705562144a21f9c6c5a66b1ec9d08f16528f143fafccfc068350c3d3798a47c6b97bdc5f64c4d7c663047bed7c25a29f82f653467f61000026d9f46f104f3d9cf14488a1f411373b278385c3ab30aa303fbba4e9b8102f868251fe3a7c5a7dc2ff93ee169ab4245c7db14cb18da86a129b6694eefef6d5ac21919f806e155ca328b41b234ebba2727bf4b1cf444364353001afb7b399af27ea5fe12b376e15b52e4e4de92df41ddd18093e5c6571a353a69652443d00be7150f18412ed19d41f0357983a587f03dc6584f07688a706dbfc677499f097b55d41d656ca70654f4c8467f6b8d50fb35f8c7c7005d4a7cf1ae98388d9d0a327283c9192897ce60d846f3d5d87b63cf3fe8c9ee2c60dcd9b65fb3d0e93b8b4b16fa8e0da3b702ae565c3a3629343b6dc8c563c1475e5d5964aec0d40479c61421353ebfa9291ccf6fdfbc654588cc86ad4269dfffee4dfe4380bb6a9c301249cf02d4bcd92ffa7853e13b639ba31d3d6fc551b7f78134470c9ac219c6282286175edbb336520d4490db3c9ff873eb219e55ecdae3c475103b9ec72cf94ec46b6081f175368d2727e7592827748a8a55e433a1d031c55b6aefaaa1876e7", 0xc41}, {&(0x7f0000004480)="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", 0xb81}, {&(0x7f0000005480)=':', 0x1}, {&(0x7f0000005500)='S', 0x1}, {&(0x7f0000005580)='q', 0x1}], 0x6}, 0x15000000}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)='0', 0x1}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001000d8900000000001c000000000000000000008a0c000000", @ANYRES32=0x0, @ANYBLOB="00000000ac14140000000000ec000000000000000000000007000000444c00010000000000000000e000000100000000ac1414aa000000000000000000000000ffffffff00000000ac1414aa000000000000000000000000e000000100000000000000000000000044440001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414bb00000000e00000020000000000000000000000000000000000000000441c00000000000000000000000000000000000000000000000000008317007f000001ac1414bb0000000000000000ac1414aa071700000000000000000000000000e0000001ac1414bb01000000000011"], 0x148}}], 0x7, 0x60c5840) 14:03:38 executing program 3: perf_event_open$cgroup(&(0x7f0000007040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe) [ 201.869241][ T9370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:03:38 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r2 = memfd_create(&(0x7f0000000040)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18181b, 0x0) sendfile(r1, r2, 0x0, 0x200000f) 14:03:38 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x200, 0x0) 14:03:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x801) 14:03:38 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1}, 0x20) 14:03:38 executing program 2: add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0x0, 0x0) 14:03:38 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) [ 201.994960][ T46] audit: type=1800 audit(1607609018.167:36): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file0" dev="sda1" ino=16565 res=0 errno=0 14:03:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_OPEN(r0, 0x0, 0x0) 14:03:38 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='V', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x2000005) 14:03:38 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r2 = memfd_create(&(0x7f0000000040)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18181b, 0x0) sendfile(r1, r2, 0x0, 0x200000f) 14:03:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x3, [@volatile, @int, @union, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @int]}, {0x0, [0x0]}}, 0x0, 0x8f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:03:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) 14:03:38 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='V', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x2000005) 14:03:38 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x101}]}, 0x10) 14:03:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}}, 0x0) 14:03:38 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='V', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x2000005) 14:03:38 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') 14:03:38 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) 14:03:41 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/thread-self\x00', 0x20080, 0x0) 14:03:41 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x3, 0x4) 14:03:41 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x4, 0x4) 14:03:41 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='V', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x2000005) 14:03:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000940)) 14:03:41 executing program 2: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x84) 14:03:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000380)) 14:03:41 executing program 2: socketpair(0x10, 0x3, 0x0, 0x0) 14:03:41 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x6c) 14:03:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0xfffffffffffffdd6, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) 14:03:41 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130001"], 0x4c}}, 0x0) [ 205.370158][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:03:41 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x30}}], 0x1, 0x0) 14:03:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20}, 0x20) 14:03:41 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 14:03:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 14:03:41 executing program 1: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x24403) 14:03:41 executing program 2: add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x38, 0x0, 0x36, 0x0, 0x62, 0x0, 0x30]}, &(0x7f00000000c0)={0x0, "f49fc455bc937cf2c2e8da14eaab14f120336eb01ca40e6881d8eca20f2b5068eddeec1e9ba8289554d0f6682f0c2956c388de7c659063bd53e956976d7703a5", 0x1d}, 0x48, 0xfffffffffffffffc) 14:03:41 executing program 3: r0 = socket(0xa, 0x3, 0x4) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80) 14:03:41 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000640), 0x4) 14:03:41 executing program 2: clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) select(0x40, &(0x7f0000000540), &(0x7f0000000580)={0x1f6}, &(0x7f00000005c0), &(0x7f0000000640)={0x0, r0/1000+10000}) 14:03:41 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, r0) 14:03:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x24, 0x0, &(0x7f0000001400)) 14:03:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 14:03:41 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000040)=""/91, 0x5b) 14:03:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) close(r2) 14:03:41 executing program 3: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000006c0)='net_prio.ifpriomap\x00', 0x2, 0x0) 14:03:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 14:03:41 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000100)=""/76, 0x4c}], 0x2}, 0x0) 14:03:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)='K', 0x1}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) 14:03:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) close(r2) 14:03:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 14:03:41 executing program 2: timer_create(0x0, 0x0, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}}, 0x0) 14:03:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) close(r2) 14:03:41 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f00000000c0)=0x6, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {}, 0x1}) 14:03:41 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0xffffffffffffff3f) 14:03:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) 14:03:41 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:03:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 14:03:42 executing program 3: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dcb3798, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:42 executing program 2: r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000000)) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) socket(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x31, 0x0, @tid=r0}, &(0x7f0000000080)=0x0) timer_settime(r3, 0x0, &(0x7f0000000780)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1000000000016) 14:03:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) close(r2) 14:03:42 executing program 3: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:42 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xd82acee900c9708f, 0x0) 14:03:42 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x141202, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='V', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x68, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x2000005) 14:03:42 executing program 3: getpid() timer_create(0x1, 0x0, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 14:03:42 executing program 0: openat$null(0xffffffffffffff9c, 0x0, 0x400040, 0x0) 14:03:42 executing program 3: setresuid(0x0, 0x0, 0x0) 14:03:42 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0xfffffffe, 0x4) 14:03:42 executing program 2: r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000000)) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) socket(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x31, 0x0, @tid=r0}, &(0x7f0000000080)=0x0) timer_settime(r3, 0x0, &(0x7f0000000780)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1000000000016) 14:03:42 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 14:03:42 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/nvram\x00', 0x0, 0x0) 14:03:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:03:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f0000000040), 0x10) 14:03:42 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)=']\'\x00', 0x0) dup3(r1, r0, 0x0) 14:03:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000020701020000000000000000050000080c00024000000000000008000c00064000000000000000000c00064000000000000000000c00064000000000000000403c00078008005c87024000000003"], 0xb4}}, 0x0) 14:03:42 executing program 1: r0 = socket(0xa, 0x3, 0x4) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x59) [ 206.274690][ T9608] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.293709][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 14:03:42 executing program 2: r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000000)) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) socket(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x31, 0x0, @tid=r0}, &(0x7f0000000080)=0x0) timer_settime(r3, 0x0, &(0x7f0000000780)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1000000000016) 14:03:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002c0001"], 0x24}}, 0x0) 14:03:42 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) exit(0x0) add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, r0) 14:03:43 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/33, 0x21) 14:03:43 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x400, 0x0) 14:03:43 executing program 2: r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000000)) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) socket(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x31, 0x0, @tid=r0}, &(0x7f0000000080)=0x0) timer_settime(r3, 0x0, &(0x7f0000000780)={{}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1000000000016) 14:03:43 executing program 1: ioprio_set$uid(0x0, 0x0, 0x4007) 14:03:43 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="b4", 0x1, r0) 14:03:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f0000000040)={r1}, 0x10) 14:03:43 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x4}) 14:03:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002c0001"], 0x24}}, 0x0) 14:03:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000022c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x2040) 14:03:43 executing program 0: io_cancel(0x0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 14:03:43 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130001"], 0x4c}}, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x22) 14:03:43 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x102, 0x0) 14:03:43 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)=']\'\x00', 0x0) dup3(r1, r0, 0x0) 14:03:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 14:03:43 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/autofs\x00', 0x400, 0x0) 14:03:43 executing program 0: getpid() timer_create(0x0, 0x0, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {r0}}, 0x0) 14:03:43 executing program 3: mq_open(&(0x7f0000000000)='*\x00', 0x40, 0x0, &(0x7f0000000400)={0xa749, 0x84, 0x7, 0x2}) 14:03:43 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$sock(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000002680)=[@mark={{0x14}}], 0x18}}], 0x2, 0x0) 14:03:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xe, 0x6, 0x101}, 0x14}}, 0x0) 14:03:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x394}}, 0x0) 14:03:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x1, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x0, 0xffffffff, 0x0, 0x0, 0x1}, 0x40) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x18}]) [ 207.425294][ T9695] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 14:03:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0), 0x4) 14:03:43 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 14:03:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="940300000103010300000000000000000000000a040013"], 0x394}}, 0x0) [ 207.473344][ T9698] skbuff: bad partial csum: csum=0/65535 headroom=2 headlen=14 14:03:43 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file1\x00', r0}, 0x10) 14:03:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000025c0)) [ 207.503687][ T9712] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.0'. 14:03:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="940300000103010300000000000000000000000a040013"], 0x394}}, 0x0) 14:03:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000025c0)) [ 207.552874][ T9719] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.0'. 14:03:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000025c0)) 14:03:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="24f6"], 0x24}}, 0x0) 14:03:43 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000000)) 14:03:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="940300000103010300000000000000000000000a040013"], 0x394}}, 0x0) [ 207.636329][ T9734] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.0'. 14:03:43 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=@abs={0x1}, 0x6e) 14:03:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000002d80), 0x4) 14:03:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000025c0)) 14:03:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="940300000103010300000000000000000000000a040013"], 0x394}}, 0x0) 14:03:43 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x0) [ 207.703971][ T9743] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.0'. 14:03:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="01b3"], 0x5a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) 14:03:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000080)) 14:03:43 executing program 1: add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="9f", 0x1, 0xffffffffffffffff) 14:03:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}}, 0x0) 14:03:43 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00'}) 14:03:43 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x81800) 14:03:43 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 14:03:43 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0, 0x14}}], 0x1, 0x0, 0x0) 14:03:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create(0x10000) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgrp(0x0) getpriority(0x1, r3) 14:03:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001500010000000000000000000200000011"], 0x18}}, 0x0) 14:03:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x122) 14:03:44 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0xd) 14:03:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create(0x10000) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgrp(0x0) getpriority(0x1, r3) 14:03:44 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000080)="94b7258c006ac971a1053481a57ae1c51419531f0000000000000001d0a33ba35191e3931d7bd813ec129fbcd4ecc08412", 0x31, 0x0) keyctl$negate(0xd, r1, 0x8001, r2) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f00000001c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x44084) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x12, 0xff, 0x8, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10130, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffff87, 0x1}, 0x0, 0xffffffffffffffff, 0x200005, 0x0, 0x0, 0x10}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r6 = gettid() tkill(r6, 0x3a) r7 = memfd_create(&(0x7f00000000c0)=']\'\x00', 0x0) dup3(r7, r5, 0x0) 14:03:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000640)=@buf) 14:03:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create(0x10000) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgrp(0x0) getpriority(0x1, r3) 14:03:44 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10180}, 0x0, 0x0, r0, 0x0) 14:03:44 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000038c0)='/dev/rtc0\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'R\x00\x00ECT\x00'}]}, 0x54}}, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0008"], 0x1}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r5, 0x0, 0xfff, 0x0) [ 208.626401][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 14:03:44 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RREADLINK(r0, 0x0, 0x51) 14:03:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create(0x10000) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgrp(0x0) getpriority(0x1, r3) 14:03:44 executing program 0: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ed", 0x1, r0) keyctl$search(0xa, r1, &(0x7f0000000140)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0) 14:03:44 executing program 0: add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="93", 0x1, 0xfffffffffffffffc) 14:03:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @remote}}}], 0x20}}], 0x2, 0x4000040) 14:03:44 executing program 3: socketpair(0xa, 0x0, 0x80000000, 0x0) 14:03:44 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='#\'%nor%v\x00\x7f\xe5\xd0ql\x96\xc9\xe6\x14\x93\xb0wk,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\vc\xba]fn\r\xdf!\x94 \xaf\xb7\x93\xe8\xb6\xad\x86\x98}S\xc6\xb9\x9e\x01\xe0m\xf5\x04\xb6\x91\xee\xabn\x16&\xab\xf9;\xe0lZ\x11@:\x7f\x86x\xb3LNF\x13\x9f\xc2\xb7/}\x8e^\x961O*\xa8\x17udw\xaf\\\x9c\xe1s\xc4\xa9AhKC`\xb9V\xf0*\xe4\xdc=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Z$\xb2v\\\xa9\xcf*t\xfa\xff\n_)\xd9\x9e\xc2w\x16\xb6nU\xd4Z1n\x02\x86\xfd\x90\xc0\xfe\x1a\xbb\xc3\xc0)j\xf8C\xc5\tr6\xcd\x83\x98\xe1\xbbpV\'\x88;\v&\xe8\xbfk\x18I>&*/\x9f\xa3\xec3)\xb4=\xa0\xa4\x03O4\x9bf\xbbN\xb9\xf8\xab\xce\x99\xff\xf9', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0x87) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2800, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) fadvise64(0xffffffffffffffff, 0x100000000, 0x100000000, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[], 0x11b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xfee) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$link(0x8, r4, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r6, 0x5c, 0x10}, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000440)="7fd261c6a4488cbb5c944c89bb165d3efdc32870a20fda86364e7ee971d484c13ce7e421d67916c322aebff59e9e78f32184feae8ca2c97e7158fa42c1296bd3490963b32dcdec34fd89f2196934155512d1e417b42ec250db986b6c", &(0x7f00000004c0)=""/16) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2fff6589e166757fb047e764"], &(0x7f0000000140)='./file1\x00', 0x0, 0xc5810, 0x0) 14:03:45 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 14:03:45 executing program 3: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000980), 0x0) 14:03:45 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='#\'%nor%v\x00\x7f\xe5\xd0ql\x96\xc9\xe6\x14\x93\xb0wk,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\vc\xba]fn\r\xdf!\x94 \xaf\xb7\x93\xe8\xb6\xad\x86\x98}S\xc6\xb9\x9e\x01\xe0m\xf5\x04\xb6\x91\xee\xabn\x16&\xab\xf9;\xe0lZ\x11@:\x7f\x86x\xb3LNF\x13\x9f\xc2\xb7/}\x8e^\x961O*\xa8\x17udw\xaf\\\x9c\xe1s\xc4\xa9AhKC`\xb9V\xf0*\xe4\xdc=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Z$\xb2v\\\xa9\xcf*t\xfa\xff\n_)\xd9\x9e\xc2w\x16\xb6nU\xd4Z1n\x02\x86\xfd\x90\xc0\xfe\x1a\xbb\xc3\xc0)j\xf8C\xc5\tr6\xcd\x83\x98\xe1\xbbpV\'\x88;\v&\xe8\xbfk\x18I>&*/\x9f\xa3\xec3)\xb4=\xa0\xa4\x03O4\x9bf\xbbN\xb9\xf8\xab\xce\x99\xff\xf9', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0x87) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2800, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) fadvise64(0xffffffffffffffff, 0x100000000, 0x100000000, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[], 0x11b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xfee) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$link(0x8, r4, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r6, 0x5c, 0x10}, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000440)="7fd261c6a4488cbb5c944c89bb165d3efdc32870a20fda86364e7ee971d484c13ce7e421d67916c322aebff59e9e78f32184feae8ca2c97e7158fa42c1296bd3490963b32dcdec34fd89f2196934155512d1e417b42ec250db986b6c", &(0x7f00000004c0)=""/16) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2fff6589e166757fb047e764"], &(0x7f0000000140)='./file1\x00', 0x0, 0xc5810, 0x0) 14:03:45 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000038c0)='/dev/rtc0\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'R\x00\x00ECT\x00'}]}, 0x54}}, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0008"], 0x1}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r5, 0x0, 0xfff, 0x0) 14:03:45 executing program 1: r0 = socket(0x2, 0x3, 0x4) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80) 14:03:45 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'vlan1\x00'}) 14:03:45 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 14:03:45 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000180)={0x101}, 0x0) 14:03:45 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='#\'%nor%v\x00\x7f\xe5\xd0ql\x96\xc9\xe6\x14\x93\xb0wk,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\vc\xba]fn\r\xdf!\x94 \xaf\xb7\x93\xe8\xb6\xad\x86\x98}S\xc6\xb9\x9e\x01\xe0m\xf5\x04\xb6\x91\xee\xabn\x16&\xab\xf9;\xe0lZ\x11@:\x7f\x86x\xb3LNF\x13\x9f\xc2\xb7/}\x8e^\x961O*\xa8\x17udw\xaf\\\x9c\xe1s\xc4\xa9AhKC`\xb9V\xf0*\xe4\xdc=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Z$\xb2v\\\xa9\xcf*t\xfa\xff\n_)\xd9\x9e\xc2w\x16\xb6nU\xd4Z1n\x02\x86\xfd\x90\xc0\xfe\x1a\xbb\xc3\xc0)j\xf8C\xc5\tr6\xcd\x83\x98\xe1\xbbpV\'\x88;\v&\xe8\xbfk\x18I>&*/\x9f\xa3\xec3)\xb4=\xa0\xa4\x03O4\x9bf\xbbN\xb9\xf8\xab\xce\x99\xff\xf9', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0x87) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2800, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) fadvise64(0xffffffffffffffff, 0x100000000, 0x100000000, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[], 0x11b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xfee) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$link(0x8, r4, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r6, 0x5c, 0x10}, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000440)="7fd261c6a4488cbb5c944c89bb165d3efdc32870a20fda86364e7ee971d484c13ce7e421d67916c322aebff59e9e78f32184feae8ca2c97e7158fa42c1296bd3490963b32dcdec34fd89f2196934155512d1e417b42ec250db986b6c", &(0x7f00000004c0)=""/16) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2fff6589e166757fb047e764"], &(0x7f0000000140)='./file1\x00', 0x0, 0xc5810, 0x0) [ 209.475460][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 14:03:45 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b00078018000180800800000001010000000000000002000000100006000465000000000c000900000000200000142a140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edbbed879db145000006028aab86000000001a00000032040000003d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r4, 0x0, 0x883719, 0x0) 14:03:45 executing program 1: migrate_pages(0x0, 0x3ff, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 209.580535][ T9866] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:03:46 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000038c0)='/dev/rtc0\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'R\x00\x00ECT\x00'}]}, 0x54}}, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0008"], 0x1}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r5, 0x0, 0xfff, 0x0) 14:03:46 executing program 1: migrate_pages(0x0, 0x3ff, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:03:46 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='#\'%nor%v\x00\x7f\xe5\xd0ql\x96\xc9\xe6\x14\x93\xb0wk,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\vc\xba]fn\r\xdf!\x94 \xaf\xb7\x93\xe8\xb6\xad\x86\x98}S\xc6\xb9\x9e\x01\xe0m\xf5\x04\xb6\x91\xee\xabn\x16&\xab\xf9;\xe0lZ\x11@:\x7f\x86x\xb3LNF\x13\x9f\xc2\xb7/}\x8e^\x961O*\xa8\x17udw\xaf\\\x9c\xe1s\xc4\xa9AhKC`\xb9V\xf0*\xe4\xdc=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Z$\xb2v\\\xa9\xcf*t\xfa\xff\n_)\xd9\x9e\xc2w\x16\xb6nU\xd4Z1n\x02\x86\xfd\x90\xc0\xfe\x1a\xbb\xc3\xc0)j\xf8C\xc5\tr6\xcd\x83\x98\xe1\xbbpV\'\x88;\v&\xe8\xbfk\x18I>&*/\x9f\xa3\xec3)\xb4=\xa0\xa4\x03O4\x9bf\xbbN\xb9\xf8\xab\xce\x99\xff\xf9', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0x87) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2800, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) fadvise64(0xffffffffffffffff, 0x100000000, 0x100000000, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[], 0x11b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xfee) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$link(0x8, r4, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r6, 0x5c, 0x10}, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000440)="7fd261c6a4488cbb5c944c89bb165d3efdc32870a20fda86364e7ee971d484c13ce7e421d67916c322aebff59e9e78f32184feae8ca2c97e7158fa42c1296bd3490963b32dcdec34fd89f2196934155512d1e417b42ec250db986b6c", &(0x7f00000004c0)=""/16) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2fff6589e166757fb047e764"], &(0x7f0000000140)='./file1\x00', 0x0, 0xc5810, 0x0) 14:03:46 executing program 1: migrate_pages(0x0, 0x3ff, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:03:46 executing program 1: migrate_pages(0x0, 0x3ff, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:03:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/71, 0x47}}], 0x1, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) [ 210.311467][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 14:03:46 executing program 1: sysinfo(&(0x7f0000004340)=""/20) 14:03:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 14:03:47 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x440, 0x0) 14:03:47 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000038c0)='/dev/rtc0\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'R\x00\x00ECT\x00'}]}, 0x54}}, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0008"], 0x1}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r5, 0x0, 0xfff, 0x0) 14:03:47 executing program 3: r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) 14:03:47 executing program 1: clock_settime(0x0, &(0x7f00000001c0)={0x0, 0x989680}) 14:03:47 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0}, 0x0]) 14:03:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:03:47 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=ANY=[], 0xd) 14:03:47 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x10201, 0x0) 14:03:47 executing program 0: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/uts\x00') 14:03:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\xc7ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8b\x9eVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \xf8{^\xd6\xcc\x10\xc1\xb3\x9f\xb8IbR:/q~\xad}\xa1^\xa7\xcd\xe2\xb9\x86\x89\x8e\xf0>\x12\x13\xf5\xe9ho{pI\xac\xbe\x9dBF\xd4\b8\xdd\xf0D\xd21S%\xf7\xf7 G\xc4\'cH\xa8\xcf/\xad\x1d\xbbn\xa6\xe1t<,_\xbcz|0GT\n\xb4\x14\xef\x11&\xb2\xf7\x9d\x81\x9ezJ\x96\xa2\xc2\x14\x0fT\x19D\xe2v0o\x1a\xe2|\xe1\xe5\x80\xbf\x1d\xd6\xe04L\xea\xfd\x9b\x1e\xdcx\xd4\x16\x17\xb7\x04S\xd8\x18\f\xb5\xe9\x1b.|\xe9\x01\x97*\xf2lty\x0e\x8c4O\xb93\xd7', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 14:03:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', 0x0}) 14:03:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@volatile, @int]}}, 0x0, 0x36}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:03:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 14:03:48 executing program 2: fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) 14:03:48 executing program 1: add_key(&(0x7f0000000640)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) 14:03:48 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x101200, 0x0) 14:03:48 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) 14:03:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\xc7ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8b\x9eVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \xf8{^\xd6\xcc\x10\xc1\xb3\x9f\xb8IbR:/q~\xad}\xa1^\xa7\xcd\xe2\xb9\x86\x89\x8e\xf0>\x12\x13\xf5\xe9ho{pI\xac\xbe\x9dBF\xd4\b8\xdd\xf0D\xd21S%\xf7\xf7 G\xc4\'cH\xa8\xcf/\xad\x1d\xbbn\xa6\xe1t<,_\xbcz|0GT\n\xb4\x14\xef\x11&\xb2\xf7\x9d\x81\x9ezJ\x96\xa2\xc2\x14\x0fT\x19D\xe2v0o\x1a\xe2|\xe1\xe5\x80\xbf\x1d\xd6\xe04L\xea\xfd\x9b\x1e\xdcx\xd4\x16\x17\xb7\x04S\xd8\x18\f\xb5\xe9\x1b.|\xe9\x01\x97*\xf2lty\x0e\x8c4O\xb93\xd7', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 14:03:48 executing program 2: prctl$PR_SET_THP_DISABLE(0x29, 0x3) sched_getparam(0x0, &(0x7f0000000000)) 14:03:51 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x430001, 0x0) 14:03:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x1, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 14:03:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\xc7ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8b\x9eVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \xf8{^\xd6\xcc\x10\xc1\xb3\x9f\xb8IbR:/q~\xad}\xa1^\xa7\xcd\xe2\xb9\x86\x89\x8e\xf0>\x12\x13\xf5\xe9ho{pI\xac\xbe\x9dBF\xd4\b8\xdd\xf0D\xd21S%\xf7\xf7 G\xc4\'cH\xa8\xcf/\xad\x1d\xbbn\xa6\xe1t<,_\xbcz|0GT\n\xb4\x14\xef\x11&\xb2\xf7\x9d\x81\x9ezJ\x96\xa2\xc2\x14\x0fT\x19D\xe2v0o\x1a\xe2|\xe1\xe5\x80\xbf\x1d\xd6\xe04L\xea\xfd\x9b\x1e\xdcx\xd4\x16\x17\xb7\x04S\xd8\x18\f\xb5\xe9\x1b.|\xe9\x01\x97*\xf2lty\x0e\x8c4O\xb93\xd7', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 14:03:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @private}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0, 0x13}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @remote}}}], 0x20}}], 0x2, 0x0) 14:03:51 executing program 0: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x5) 14:03:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000000)="a2", 0x1}], 0x3, &(0x7f0000000040)=[@ip_ttl={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}, @ip_tos_int={{0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @dev}}}], 0x78}}], 0x3, 0x0) 14:03:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000), 0x4) 14:03:51 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x10001) 14:03:51 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x280, 0x4) 14:03:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0), 0x4) 14:03:51 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) 14:03:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\xc7ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8b\x9eVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \xf8{^\xd6\xcc\x10\xc1\xb3\x9f\xb8IbR:/q~\xad}\xa1^\xa7\xcd\xe2\xb9\x86\x89\x8e\xf0>\x12\x13\xf5\xe9ho{pI\xac\xbe\x9dBF\xd4\b8\xdd\xf0D\xd21S%\xf7\xf7 G\xc4\'cH\xa8\xcf/\xad\x1d\xbbn\xa6\xe1t<,_\xbcz|0GT\n\xb4\x14\xef\x11&\xb2\xf7\x9d\x81\x9ezJ\x96\xa2\xc2\x14\x0fT\x19D\xe2v0o\x1a\xe2|\xe1\xe5\x80\xbf\x1d\xd6\xe04L\xea\xfd\x9b\x1e\xdcx\xd4\x16\x17\xb7\x04S\xd8\x18\f\xb5\xe9\x1b.|\xe9\x01\x97*\xf2lty\x0e\x8c4O\xb93\xd7', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 14:03:51 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa03aa0086dd601bfc97004d8800fe800000000000000100000000000000ff02000000000000000000000000000100004e20004c90"], 0x0) 14:03:51 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000001c0)=r1) 14:03:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:03:51 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa03aa0086dd601bfc97004d8800fe800000000000000100000000000000ff02000000000000000000000000000100004e20004c90"], 0x0) 14:03:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0x188, 0x130, 0x0, 0x0, 0xf0, 0x240, 0x1c8, 0x1c8, 0x1c8, 0x240, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) sendfile(r4, r3, 0x0, 0x4000000000edbc) 14:03:51 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa03aa0086dd601bfc97004d8800fe800000000000000100000000000000ff02000000000000000000000000000100004e20004c90"], 0x0) 14:03:51 executing program 0: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000000)=@secondary='builtin_and_secondary_trusted\x00') 14:03:51 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0x0, 0x0) 14:03:51 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa03aa0086dd601bfc97004d8800fe800000000000000100000000000000ff02000000000000000000000000000100004e20004c90"], 0x0) 14:03:51 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x10000, 0x0) 14:03:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 14:03:54 executing program 0: ioprio_set$uid(0x3, 0x0, 0x4007) 14:03:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:03:54 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 14:03:54 executing program 3: getpid() timer_create(0x0, 0x0, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 14:03:54 executing program 0: perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:54 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000), 0x0) 14:03:54 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0x7f0b, 0x4) 14:03:54 executing program 0: recvmsg(0xffffffffffffffff, 0x0, 0x80002000) 14:03:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:54 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0) 14:03:54 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) 14:03:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:54 executing program 0: socket$inet(0x2, 0x2, 0xc8) 14:03:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000002c0)='I', 0x1}, {&(0x7f00000003c0)="ab", 0x1}], 0x3}}], 0x2, 0x0) 14:03:54 executing program 3: r0 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x48801) 14:03:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:54 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x38, 0x36, 0x36, 0x30, 0x62, 0x66, 0x30, 0x61, 0x65, 0x61, 0x1]}, &(0x7f00000000c0)={0x0, "f49fc455bc937cf2c2e8da14eaab14f120336eb01ca40e6881d8eca20f2b5068eddeec1e9ba8289554d0f6682f0c2956c388de7c659063bd53e956976d7703a5"}, 0x48, 0xfffffffffffffffc) 14:03:54 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 14:03:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x10) 14:03:54 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x38, 0x36, 0x36, 0x30, 0x62, 0x66, 0x30, 0x61, 0x65, 0x61, 0x1]}, &(0x7f00000000c0)={0x0, "f49fc455bc937cf2c2e8da14eaab14f120336eb01ca40e6881d8eca20f2b5068eddeec1e9ba8289554d0f6682f0c2956c388de7c659063bd53e956976d7703a5"}, 0x48, 0xfffffffffffffffc) 14:03:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x1002, 0x4) 14:03:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) 14:03:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x394}}, 0x0) 14:03:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 14:03:54 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x38, 0x36, 0x36, 0x30, 0x62, 0x66, 0x30, 0x61, 0x65, 0x61, 0x1]}, &(0x7f00000000c0)={0x0, "f49fc455bc937cf2c2e8da14eaab14f120336eb01ca40e6881d8eca20f2b5068eddeec1e9ba8289554d0f6682f0c2956c388de7c659063bd53e956976d7703a5"}, 0x48, 0xfffffffffffffffc) [ 218.556945][T10139] __nla_validate_parse: 1 callbacks suppressed 14:03:54 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=@hat={'changehat ', 0x4}, 0x1d) 14:03:54 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x38, 0x36, 0x36, 0x30, 0x62, 0x66, 0x30, 0x61, 0x65, 0x61, 0x1]}, &(0x7f00000000c0)={0x0, "f49fc455bc937cf2c2e8da14eaab14f120336eb01ca40e6881d8eca20f2b5068eddeec1e9ba8289554d0f6682f0c2956c388de7c659063bd53e956976d7703a5"}, 0x48, 0xfffffffffffffffc) 14:03:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0, 0xfffffffffffffeb3}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @remote}}}], 0x20}}], 0x2, 0x0) [ 218.557017][T10139] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.631075][ T46] audit: type=1400 audit(1607609034.809:37): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10150 comm="syz-executor.0" 14:03:54 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) 14:03:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001040)={'batadv_slave_0\x00'}) 14:03:54 executing program 0: add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000500)="b7a5", 0x2, 0xfffffffffffffffb) 14:03:54 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x2d, 0x0, &(0x7f0000000040)) 14:03:54 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) msgrcv(0x0, &(0x7f0000000440)={0x0, ""/237}, 0xf5, 0x2, 0x0) 14:03:54 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) 14:03:54 executing program 0: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:03:54 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa03aa0086dd601bfc97004d8800fe800000000000000100000000000000ff02000000000000000000000000000100004e20004c90"], 0x0) 14:03:54 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$get_security(0x11, r0, 0x0, 0x0) 14:03:54 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0xca00084c) 14:03:54 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), 0x4) 14:03:54 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 14:03:55 executing program 2: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d5", 0x1, 0xfffffffffffffffc) 14:03:55 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010000000000800000007275c9a9", @ANYRES64=r0, @ANYRESHEX=0x0], 0x24}}, 0x0) 14:03:55 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000100)) 14:03:55 executing program 1: ioprio_set$uid(0x0, 0xee00, 0x2000) 14:03:55 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000007c0)=0x4, 0x4) [ 218.869169][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:03:55 executing program 2: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x4008001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000940)) pipe2$9p(&(0x7f0000000980), 0x4800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) 14:03:55 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=@hat={'changehat ', 0x4}, 0x1d) socket$nl_sock_diag(0x10, 0x3, 0x4) 14:03:55 executing program 0: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8082) 14:03:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000000)="a2", 0x1}], 0x6, &(0x7f0000000000), 0x20}}], 0x2, 0x0) [ 218.927519][ T46] audit: type=1400 audit(1607609035.099:38): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10209 comm="syz-executor.1" 14:03:55 executing program 2: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x4008001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000940)) pipe2$9p(&(0x7f0000000980), 0x4800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) 14:03:55 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x141202, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='V', 0x1}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x2000005) [ 218.968364][ T46] audit: type=1400 audit(1607609035.139:39): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10209 comm="syz-executor.1" 14:03:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x7, 0x801}, 0x14}}, 0x0) 14:03:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)='m', 0x1}, {&(0x7f00000002c0)='I', 0x1}, {&(0x7f00000003c0)="ab", 0x1}], 0x3}}], 0x2, 0x0) 14:03:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000007c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002100, 0x0) 14:03:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'batadv_slave_1\x00', @ifru_ivalue}) 14:03:55 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000c80)={0x77359400}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130001"], 0x4c}}, 0x0) 14:03:55 executing program 2: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x4008001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000940)) pipe2$9p(&(0x7f0000000980), 0x4800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) 14:03:55 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000000c0)=0x6, 0x4) 14:03:55 executing program 2: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x4008001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000940)) pipe2$9p(&(0x7f0000000980), 0x4800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) 14:03:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x601, 0x0) write$cgroup_type(r0, 0x0, 0x0) 14:03:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@delneigh={0x38, 0x1d, 0x323, 0x0, 0x0, {0x2}, [@NDA_PORT={0x6}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}}, 0x0) 14:03:56 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000040)=0x2e) 14:03:56 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 14:03:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000400), 0x4) 14:03:56 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010000, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130001"], 0x4c}}, 0x0) 14:03:56 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) 14:03:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000001400)) 14:03:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="94"], 0x394}}, 0x0) 14:03:56 executing program 1: r0 = socket(0xa, 0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 14:03:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r0) 14:03:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RSTATu(r0, &(0x7f00000044c0)={0x155, 0x7d, 0x0, {{0x0, 0xa0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, '\\\\', 0x5, '!$]:)', 0x61, '/wp^\xbc\xe7`UH\xc2$\',/@$!\x89H%\\\xe5vvk\x87\xc9\xd9\xa3\xce+63\xcek)\xbd\xc6\"\x8d$\xebN\xdb^\xc8eu8\x11\xc2\x92\xdd\x80\xad/\xc2>\x8b\xcd\x80\x8d\xb7\x06=\xda\x01\xb6\x1fs07\x1dp!\x044\xe5\xc6H\xd1\x91\xd8\xb9\xd9W-\xed\xdawb\xfc\xf1!\x92\x94\xd0', 0x5, '/:\\,,'}, 0xa0, '3\x00\xc6\xdc\xa3@\xda\xc3\xac\x94\x11\xa5\x1f\x81\xd8\xbf\'W*YRW\x06yO\xbau\x93\xf1\x90\xc9\x8d\xdd\xae\x04\xdbZ\xf1\x93\f[\f\x92w\x8c\xe3\xf9\xb2\xdb\x16\xe8ka_#\xc09\x10\xf2N\xf2P\x82\xc1\x18\x11\x84j\xd9\xa3\xc5\xee\x17\x02\xea\t\xf8\xeb.\xed\x1b\r\x9034\'\xd5\xdf_\xc4\x0f\xe2\x89\x1d-\x89\x0e15\xbc\xff\xc6A&\xc8\xb3\xf4O\xdb@\xad\x15\xeb\x88\x06m\xba\x10o\x8e(9\x87\xcb\xc6\xbe0\x0f\n!\xc8%\x87\nu\xad\x01\xa1Q;\xed\xad)\xa6\xba>\x9cN\x1c\x8f\xd9G5\xaen=\x8d\xc7\x0f\''}}, 0x155) 14:03:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0), 0x4) 14:03:56 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000000)) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130001"], 0x4c}}, 0x0) 14:03:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000800)='6', 0x1}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @remote}}}], 0x20}}], 0x2, 0x4000040) 14:03:56 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={0x0, r1/1000+60000}, 0x10) 14:03:56 executing program 0: socket$inet(0x2, 0xa, 0x81) 14:03:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 14:03:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) [ 220.052190][T10307] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 14:03:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000200001"], 0x24}}, 0x0) 14:03:56 executing program 0: setresuid(0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 14:03:56 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) lseek(r1, 0x0, 0x4) 14:03:56 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10940, 0x0) 14:03:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) r1 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="1400020000000000000000986e79150ceb43779fff447100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e000000000000000000708846b9461fa1b885eec66ed3f35f0e78f02d673a1ac6e560b0fcad2d36bba546e6836840d8a620af132f62c4b932e50987bb2f7b64fa2fd7c7c2f886183c24c0951c47344f9e204cd38be7bd965ce688e1de6dcc8b3f8186562d2e28372bf6bd8c9cb324ea304fd18fca663996d4222043ceeb4fdabeb48318193e28f594dd7915f975f4d6256a1e8a2061e9a1addd0c2c59827491952f071340cc0701aea4471d643e"], 0xe4}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r0) 14:03:56 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300), 0x4) 14:03:56 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) lseek(r1, 0x0, 0x4) [ 220.144925][T10327] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 14:03:56 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x104c6b2d4621a583, 0x0) 14:03:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) r1 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="1400020000000000000000986e79150ceb43779fff447100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e000000000000000000708846b9461fa1b885eec66ed3f35f0e78f02d673a1ac6e560b0fcad2d36bba546e6836840d8a620af132f62c4b932e50987bb2f7b64fa2fd7c7c2f886183c24c0951c47344f9e204cd38be7bd965ce688e1de6dcc8b3f8186562d2e28372bf6bd8c9cb324ea304fd18fca663996d4222043ceeb4fdabeb48318193e28f594dd7915f975f4d6256a1e8a2061e9a1addd0c2c59827491952f071340cc0701aea4471d643e"], 0xe4}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r0) 14:03:56 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) 14:03:56 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000040), 0x4) 14:03:56 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) lseek(r1, 0x0, 0x4) [ 220.237810][T10341] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 14:03:56 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) lseek(r1, 0x0, 0x4) 14:03:56 executing program 0: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001400)) 14:03:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_DELMDB={0x18, 0x55, 0x1}, 0x18}}, 0x0) 14:03:56 executing program 3: socketpair(0x2c, 0x0, 0x0, 0x0) 14:03:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) r1 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="1400020000000000000000986e79150ceb43779fff447100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e000000000000000000708846b9461fa1b885eec66ed3f35f0e78f02d673a1ac6e560b0fcad2d36bba546e6836840d8a620af132f62c4b932e50987bb2f7b64fa2fd7c7c2f886183c24c0951c47344f9e204cd38be7bd965ce688e1de6dcc8b3f8186562d2e28372bf6bd8c9cb324ea304fd18fca663996d4222043ceeb4fdabeb48318193e28f594dd7915f975f4d6256a1e8a2061e9a1addd0c2c59827491952f071340cc0701aea4471d643e"], 0xe4}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r0) 14:03:56 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) 14:03:56 executing program 1: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60}, 0x60) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 14:03:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0), 0x4) [ 220.356601][T10368] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 14:03:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x40000006, 0x4) 14:03:56 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000)={0x2, 0x7ff}, &(0x7f0000000040)) 14:03:56 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101281, 0x0) 14:03:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) r1 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="1400020000000000000000986e79150ceb43779fff447100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e000000000000000000708846b9461fa1b885eec66ed3f35f0e78f02d673a1ac6e560b0fcad2d36bba546e6836840d8a620af132f62c4b932e50987bb2f7b64fa2fd7c7c2f886183c24c0951c47344f9e204cd38be7bd965ce688e1de6dcc8b3f8186562d2e28372bf6bd8c9cb324ea304fd18fca663996d4222043ceeb4fdabeb48318193e28f594dd7915f975f4d6256a1e8a2061e9a1addd0c2c59827491952f071340cc0701aea4471d643e"], 0xe4}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r0) 14:03:56 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x510, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r1, &(0x7f0000000100)="0503460008003e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x1054, 0x0, 0x0, 0x1d3) 14:03:56 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) [ 220.435413][T10384] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 14:03:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000002d80)=0x7ff, 0x4) 14:03:56 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f0000000080)) 14:03:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) 14:03:56 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 14:03:56 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=@hat={'changehat '}, 0x1d) 14:03:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800011ac2060000000000000a00000008000000000000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0xfeffffff00000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 14:03:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:03:56 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, 0x0, 0x0) 14:03:56 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000480)='mptcp_pm\x00') 14:03:56 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "ec1d03f9e5c5a69cb84789c7e7e94154961883863f0ac6268314cfebea2cc4436b56f854e03d8280e7a279bcc43f5d1816e6a58cc86aeb327984dcedab16a5db"}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) 14:03:56 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) [ 220.559978][T10408] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 220.648827][T10419] IPv6: NLM_F_CREATE should be specified when creating new route 14:03:56 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0) 14:03:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005e50000009a070000be32f93a40", @ANYRES32=r5, @ANYBLOB="05ff0c0000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120180, r5}) r6 = socket$inet6(0xa, 0x80003, 0x4) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@empty={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb]}, @rand_addr=' \x01\x00', @ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r5}) [ 220.684468][ T46] audit: type=1804 audit(1607609036.859:40): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="//selinux" name="/selinux/bus" dev="sda1" ino=16652 res=1 errno=0 [ 220.725501][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.742743][ T46] audit: type=1804 audit(1607609036.919:41): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/selinux/bus" dev="sda1" ino=16652 res=1 errno=0 [ 220.743526][T10435] device veth3 entered promiscuous mode [ 220.799908][T10438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:03:57 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) 14:03:57 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) 14:03:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005e50000009a070000be32f93a40", @ANYRES32=r5, @ANYBLOB="05ff0c0000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120180, r5}) r6 = socket$inet6(0xa, 0x80003, 0x4) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@empty={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb]}, @rand_addr=' \x01\x00', @ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r5}) 14:03:57 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) [ 221.421443][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.433049][ T46] audit: type=1804 audit(1607609037.609:42): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="//selinux" name="/selinux/bus" dev="sda1" ino=16652 res=1 errno=0 14:03:57 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) [ 221.438866][T10446] device veth5 entered promiscuous mode [ 221.462325][ T46] audit: type=1804 audit(1607609037.639:43): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="//selinux" name="/selinux/bus" dev="sda1" ino=16652 res=1 errno=0 14:03:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005e50000009a070000be32f93a40", @ANYRES32=r5, @ANYBLOB="05ff0c0000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120180, r5}) r6 = socket$inet6(0xa, 0x80003, 0x4) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@empty={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb]}, @rand_addr=' \x01\x00', @ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r5}) [ 221.492322][ T46] audit: type=1804 audit(1607609037.639:44): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="//selinux" name="/selinux/bus" dev="sda1" ino=16652 res=1 errno=0 [ 221.517705][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:03:57 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) [ 221.519836][ T46] audit: type=1804 audit(1607609037.669:45): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="//selinux" name="/selinux/bus" dev="sda1" ino=16652 res=1 errno=0 14:03:57 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) [ 221.535207][T10459] device veth7 entered promiscuous mode [ 221.564181][ T46] audit: type=1804 audit(1607609037.669:46): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="//selinux" name="/selinux/bus" dev="sda1" ino=16652 res=1 errno=0 14:03:57 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) 14:03:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005e50000009a070000be32f93a40", @ANYRES32=r5, @ANYBLOB="05ff0c0000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120180, r5}) r6 = socket$inet6(0xa, 0x80003, 0x4) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@empty={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb]}, @rand_addr=' \x01\x00', @ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r5}) [ 221.655801][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.676070][T10475] device veth9 entered promiscuous mode 14:03:57 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) 14:03:57 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) 14:03:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44851) 14:03:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:03:57 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x8000, 0x7fff}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff6) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) 14:03:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 14:03:58 executing program 1: openat$null(0xffffffffffffff9c, 0x0, 0x438000, 0x0) 14:03:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:03:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14:03:58 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000280) 14:03:58 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000040)) 14:03:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000700), 0x4) 14:03:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="b4", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 14:03:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x801}, 0x14}}, 0x0) 14:03:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="b4", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 14:03:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) 14:03:58 executing program 0: socket$inet(0x2, 0x0, 0x398) 14:03:58 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x6040, 0x0) 14:03:58 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/autofs\x00', 0x400, 0x0) 14:03:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="b4", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 14:03:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="b4", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 14:03:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)='o', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000740)='M', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}, 0x15000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)='0', 0x1}], 0x1, &(0x7f0000001780)=ANY=[@ANYRES32=0x0], 0x148}}], 0x5, 0x60c5840) 14:03:58 executing program 3: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x1}, r0) 14:03:58 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x39, 0x0, &(0x7f0000000e80)) [ 222.750558][T10550] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:03:58 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0) 14:03:58 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x7ffffffe, 0x4) 14:03:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={0x0}}, 0x0) 14:03:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x323}, 0x1c}}, 0x0) 14:03:59 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x30000, 0x0) 14:03:59 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6cd}]}, 0x10) 14:03:59 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) 14:03:59 executing program 3: keyctl$chown(0x4, 0x0, 0x0, 0xee01) 14:03:59 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) 14:03:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\xc7ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8b\x9eVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \xf8{^\xd6\xcc\x10\xc1\xb3\x9f\xb8IbR:/q~\xad}\xa1^\xa7\xcd\xe2\xb9\x86\x89\x8e\xf0>\x12\x13\xf5\xe9ho{pI\xac\xbe\x9dBF\xd4\b8\xdd\xf0D\xd21S%\xf7\xf7 G\xc4\'cH\xa8\xcf/\xad\x1d\xbbn\xa6\xe1t<,_\xbcz|0GT\n\xb4\x14\xef\x11&\xb2\xf7\x9d\x81\x9ezJ\x96\xa2\xc2\x14\x0fT\x19D\xe2v0o\x1a\xe2|\xe1\xe5\x80\xbf\x1d\xd6\xe04L\xea\xfd\x9b\x1e\xdcx\xd4\x16\x17\xb7\x04S\xd8\x18\f\xb5\xe9\x1b.|\xe9\x01\x97*\xf2lty\x0e\x8c4O\xb93\xd7', 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) gettid() tkill(0x0, 0x0) 14:03:59 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 14:03:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000000180)=""/162, 0xa2) 14:03:59 executing program 3: timer_create(0x0, 0x0, &(0x7f00000010c0)) clock_gettime(0x0, &(0x7f0000000000)) 14:03:59 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x187100, 0x0) 14:03:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)='m', 0x1}, {0x0}, {&(0x7f00000003c0)="ab", 0x1}], 0x3}}], 0x2, 0x0) 14:03:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) 14:03:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), 0x10) 14:03:59 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self\x00', 0x2042, 0x0) 14:03:59 executing program 1: mq_open(&(0x7f0000000000)='*\x00', 0x0, 0x0, 0x0) 14:03:59 executing program 0: rt_sigaction(0x8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) 14:03:59 executing program 1: mq_open(&(0x7f0000000000)='*\x00', 0x0, 0x0, 0x0) 14:03:59 executing program 2: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000040)=""/88, 0x58) 14:03:59 executing program 0: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4060}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:04:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) 14:04:00 executing program 1: mq_open(&(0x7f0000000000)='*\x00', 0x0, 0x0, 0x0) 14:04:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xe, 0x6, 0x101}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 14:04:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) 14:04:00 executing program 1: mq_open(&(0x7f0000000000)='*\x00', 0x0, 0x0, 0x0) 14:04:00 executing program 2: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00') 14:04:00 executing program 0: memfd_create(&(0x7f00000000c0)='tasks\x00', 0x2) 14:04:00 executing program 3: fanotify_mark(0xffffffffffffffff, 0x41, 0x40000028, 0xffffffffffffffff, 0x0) 14:04:00 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) 14:04:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x10) 14:04:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000080)={0xec4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x34c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_SRF={0x32c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "eb867883c177a780961ec654cd972d37be8eb2c4a13d58c10a6544dedb8dfa05709aeb7508aabe82d8713327dff82fffcf672c6d836c35e5d7f755c490022e0096d07449bbe14ce187182e0dd5328faf37e02b9687101dde761b6ab6eb6aed6d9e6231b0ca36b95aef978c44f31d4ca78e6112c84e165e573696394cd39af773e7a73bacacf521f145c03db48c0cf83187ea79c7d4a3f4d02997eef53db41766c5d97317ab45d43ab38190387c54b39d7a6995e9808549a60c8c52f2e8393cedeb615df71f2c6b850ff5f2772400b6c11653193c5dce10645ea0a42716ccbeb9107dfd4a2ddde1c94079817417b29b4c4204b6aba12a5656eaa79d809926bf"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc5, 0xb, "230eb1ccec57ce66a9aaad5961edc40e8e879c0ac7fbb6848872e6636f691b530b055656314908e7814e15b4e37815b0ebf7c55f2c2f492496cdb76a05f30452288e9ba774cf9b5e7226debc6886181ed634a42a9246d9700cce786ad62006ea315d79e4d9ca78b065fcf6cf0da891e0b61d129158e8593cbf25f51fdb2e4e53bc37cd5b4100314c53a6f14ead5cd1e52b2a90a80234a8e4b9a51cebbf48a7725a8e8802df724a9190e17d1e623f0ca9a7248f0da1a3d47ebcfe061d25ebd8cff4"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9d, 0xb, "7b7c389d4ce775754e5901da30e6c3a8d65188e8792c0f878c137aa6e549bfbcc7f3cc2b50011c9e64fb314113bb1b60b63881bd2345d338d8502d4d0788051a34ff0b568183dd1f2eca3784ab4773eb26dad60477a9dacaa1c0739ce1dadf5d8d00f0034113b5ea0f8fe043ac87896e8e77e788c004847e02ef652f4a827b29472e91f83d40bc1ffe8d18a30eace51fb6270ec3c4bc15501d"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xb0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x69, 0xb, "99621f41c72a2568082eaafc1618edc3ab279746185f65701be636bed7f8ce6bde4260f7755a3e2d46f92c0701265c3af7ab8aa596cf73cddc31888eac2f2cd1e8af00027cddf86782958b84cc4ed418039802fb7d9219e6db1134007017796c935d9397da"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x90c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x128, 0xe, 0x0, 0x1, [{0x59, 0x0, "1b4cf2890c555b7e4db9593e80a3ec1c514b59201718fbe3f5c048ba55ff36679dcbcdb6d7d328e571b0aef2e1ad618864247feffeef622a6e7314766a875be85133cb7d6ea7f1c18cbcff67321fa35d0f35bde564"}, {0xc5, 0x0, "fb1c1f37199c7b6294bc15af6fd3095ea637a60ab1217e4838f960160339d53de3e28756e59ad59732cb5ce6670b2a9ebfb98b9e32dca185ced6482dd5ebbacc7926b7f33217f15efccfbba3d21f3c11aaf04bef0dab2302887523385f03894dda362983dacb729896735cb16554a8b216e7109531e3c1daa7471d0a39e530d1487385c37a787b850c576cd56e06bc744cdc7403fc68b84e92794f56738aecf55ffd07f9e5bdba6d19610b9c3e2e65d6204ad518dc65d8f96b215443da06c6c0a4"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x7c8, 0xe, 0x0, 0x1, [{0x41, 0x0, "69c835218de8a281df631fadadea9d5ba5fb7f99290e53ca0b864bff6e71dcb58f40e268192485da2ac313a09be5a9923732c9df13db071edd12a0d16c"}, {0x81, 0x0, "83dedb0d19f81266efa996e1a277381d808bcaaa900b22bf00fe2cd5685845cad732f55c562f5011afc86f6d158f39693d3733c999e1c6df4734d0a4aa0c108cb637d18b0ab61f204e77f04cf802cd709c3a30e2b37da91a895e2214905848070b8c21ef20a074240b60416bc8f4fe2a5a49ec48613ee0fa829e338d5c"}, {0x6f9, 0x0, "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"}]}]}]}, 0xec4}}, 0x0) 14:04:00 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) 14:04:00 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x789003, 0x0) 14:04:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 14:04:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)='K', 0x1}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0xfffffffffffffdcb}}], 0x2, 0x0) 14:04:00 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0x10) 14:04:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0xb1d0fab3642d4494}, 0x40040) 14:04:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xe, 0x6, 0x101}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000001540)={&(0x7f0000000180), 0x80, &(0x7f0000001440)=[{&(0x7f0000000200)=""/109, 0x6d}], 0x1, &(0x7f0000001480)=""/165, 0xa5}, 0x0) [ 224.598842][T10687] netlink: 308 bytes leftover after parsing attributes in process `syz-executor.1'. 14:04:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @remote}, &(0x7f0000000100)=0xc) unshare(0x2c020400) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) clone(0x3a3dd4008400ad01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0xe) r3 = dup(r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 14:04:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 14:04:00 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0xffffffffffffff6b) 14:04:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010000000000800000007275c9a9", @ANYRES64=r0, @ANYRESHEX=0x0], 0x24}}, 0x0) 14:04:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001000010000000000800000007275c9a9", @ANYRES64=r1, @ANYBLOB="c3"], 0x24}}, 0x0) 14:04:00 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x53, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x2000005) [ 224.676924][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.714088][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:04:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040, 0x0) 14:04:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x1c, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_EXP={0x4}, @NFQA_CT={0x4}]}, 0x1c}}, 0x0) 14:04:00 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x53, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x2000005) [ 224.791481][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.806865][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:04:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@volatile, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:04:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000100)) 14:04:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0) 14:04:01 executing program 3: sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000880)='./file0\x00', 0x2000001) 14:04:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) 14:04:01 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x53, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x2000005) 14:04:01 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 14:04:01 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$update(0x2, r0, &(0x7f0000000180)="a0", 0x1) 14:04:04 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x18\x00Fm\xcbzP*\x9cb\x10\xbb\xa0\xdb\x9ee\\\xf2N[\x18\x8e\xce\xab\x8a9\aU\xa3\xc0', 0x0) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x53, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x2000005) 14:04:04 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x6c) 14:04:04 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$update(0x2, r0, &(0x7f0000000180)="a0", 0x1) 14:04:04 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$update(0x2, r0, &(0x7f0000000180)="a0", 0x1) 14:04:04 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0xfffffffa}, 0x8) 14:04:04 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$update(0x2, r0, &(0x7f0000000180)="a0", 0x1) 14:04:04 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$update(0x2, r0, &(0x7f0000000180)="a0", 0x1) 14:04:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0001000000000001800000000000001b000000", @ANYBLOB="e30000000000000000000007"], 0x24}}, 0x0) 14:04:04 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$update(0x2, r0, &(0x7f0000000180)="a0", 0x1) 14:04:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @multicast2}}) 14:04:04 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "7d042c611331c37d40784866c5f0b54b5fe3797aed195ade2e890658ff9bae02cc011ddacc6a6bf1c6200f17812f26de7509a752035c7ed8f58ae915046c2864"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$update(0x2, r0, &(0x7f0000000180)="a0", 0x1) 14:04:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 14:04:04 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) 14:04:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 14:04:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c0001fc"], 0x24}}, 0x0) 14:04:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 14:04:04 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) write$P9_RSTATu(r0, &(0x7f00000021c0)={0x56, 0x7d, 0x0, {{0x0, 0x3f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6, ',(9{\'{', 0x2, '-$', 0x3, ']\\H', 0x1, '-'}, 0x2, '&.', 0xffffffffffffffff}}, 0x56) 14:04:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 14:04:04 executing program 3: clock_gettime(0x3, &(0x7f0000000300)) 14:04:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 14:04:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 14:04:04 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000640)=0x8, 0x4) 14:04:04 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x143042, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$char_raw(r2, &(0x7f0000000040)=ANY=[], 0x2600) 14:04:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}}, 0x0) 14:04:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 14:04:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x39bfa512, 0x4) 14:04:04 executing program 0: select(0x40, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000640)) 14:04:04 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, &(0x7f0000000c80)={0x77359400}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130001"], 0x4c}}, 0x0) 14:04:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 14:04:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0xff92}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000000040)=[@ip_retopts={{0x0, 0x0, 0x7, {[@generic={0x0, 0x0, "9ca298c5c24281cd604ffe63b74d"}, @lsrr={0x83, 0x0, 0x0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @cipso={0x86, 0x0, 0x0, [{0x0, 0x0, "cffe57edfa009855bbfa3393e21b"}, {0x0, 0x0, "11949b2fd4aa"}, {0x0, 0x0, "67e540e6307c068b1d"}, {0x0, 0x0, "4acfefbe58ca5b05f14151eb2060ee3d"}]}, @rr={0x7, 0x0, 0x0, [@remote, @dev, @dev, @loopback, @dev, @rand_addr, @dev, @multicast2, @multicast1]}, @noop, @noop, @ssrr={0x89, 0x0, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @end]}}}, @ip_tos_u8, @ip_tos_u8, @ip_tos_u8]}}], 0x400000000000045, 0x0) 14:04:04 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000080)) 14:04:04 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130601"], 0x4c}}, 0x0) 14:04:04 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000130001b1"], 0x4c}}, 0x0) 14:04:04 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)=0xffffffdf) 14:04:04 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00)='IPVS\x00') 14:04:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), 0x4) 14:04:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 14:04:04 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$sock(r0, &(0x7f000000c300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 14:04:04 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@hat={'changehat ', 0x0, 0x5e, ['-{/^&\xc2^)({-:,%\'[\x00']}, 0x2e) 14:04:04 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\x17\x01\x00zG\xbb\x9074\xb6\x00\xc6$\xf3\x04D\xa0w\x05\xf9S\xbd{\xb3j\xcb/\x1a\x9ewtz\xc5\xcd\xd7\xbe\r\xf1w\fhL\xdd\x04S\x8b]\xb6#\xbe1\x88q\xe26.\xf9\xe2\x86\x95B{\xa5^w\x10f%6089\x99\x10#q\xd94N\x1en\xc1N#\x9b\xd6\npO\x7f\x17n\x96\x95\xee\xf7\xa2\x80', 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 14:04:04 executing program 3: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x800) [ 228.534203][ T46] kauditd_printk_skb: 23 callbacks suppressed [ 228.534213][ T46] audit: type=1400 audit(1607609044.709:70): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10873 comm="syz-executor.2" 14:04:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11) 14:04:04 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="f6", 0x1, 0xffffffffffffffff) 14:04:04 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f00000000c0)) 14:04:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 14:04:04 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\x17\x01\x00zG\xbb\x9074\xb6\x00\xc6$\xf3\x04D\xa0w\x05\xf9S\xbd{\xb3j\xcb/\x1a\x9ewtz\xc5\xcd\xd7\xbe\r\xf1w\fhL\xdd\x04S\x8b]\xb6#\xbe1\x88q\xe26.\xf9\xe2\x86\x95B{\xa5^w\x10f%6089\x99\x10#q\xd94N\x1en\xc1N#\x9b\xd6\npO\x7f\x17n\x96\x95\xee\xf7\xa2\x80', 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 14:04:04 executing program 3: r0 = add_key$keyring(&(0x7f0000001800)='keyring\x00', &(0x7f0000001840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000001880)='cifs.idmap\x00', &(0x7f00000018c0)={'syz', 0x0}, 0xfffffffffffffffb) 14:04:04 executing program 2: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 14:04:04 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 14:04:04 executing program 3: r0 = socket(0xa, 0x3, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:04:04 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\x17\x01\x00zG\xbb\x9074\xb6\x00\xc6$\xf3\x04D\xa0w\x05\xf9S\xbd{\xb3j\xcb/\x1a\x9ewtz\xc5\xcd\xd7\xbe\r\xf1w\fhL\xdd\x04S\x8b]\xb6#\xbe1\x88q\xe26.\xf9\xe2\x86\x95B{\xa5^w\x10f%6089\x99\x10#q\xd94N\x1en\xc1N#\x9b\xd6\npO\x7f\x17n\x96\x95\xee\xf7\xa2\x80', 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 14:04:04 executing program 2: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000100)=""/36, 0x24) 14:04:04 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000001900)) 14:04:04 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={r1}, 0x10) 14:04:04 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\x17\x01\x00zG\xbb\x9074\xb6\x00\xc6$\xf3\x04D\xa0w\x05\xf9S\xbd{\xb3j\xcb/\x1a\x9ewtz\xc5\xcd\xd7\xbe\r\xf1w\fhL\xdd\x04S\x8b]\xb6#\xbe1\x88q\xe26.\xf9\xe2\x86\x95B{\xa5^w\x10f%6089\x99\x10#q\xd94N\x1en\xc1N#\x9b\xd6\npO\x7f\x17n\x96\x95\xee\xf7\xa2\x80', 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 14:04:04 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) 14:04:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_tos_u8], 0xffffffffffffff31}}], 0x2, 0x0) 14:04:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000700)=0x1, 0x4) 14:04:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='changehat 0'], 0x1d) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:04:05 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) [ 228.909291][T10939] AppArmor: change_hat: Invalid input '0' 14:04:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_tos_u8], 0xffffffffffffff31}}], 0x2, 0x0) 14:04:05 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x4) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0100000905000100070000000000000004004ff49c217dd4ab3300f34470233113a6aa65187dcc22788d60dbb4376477c82cb60763e1a50fb6adb99f9f2745c0f6193174f0702ef9d92d3371134499fff06bec435ec755beb6d0e0860daf9b58032474ca8cd23a67bd69400b46c93e5e7383a9640936a7248b323aea"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) r4 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d{pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0x0) 14:04:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 14:04:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='changehat 0'], 0x1d) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:04:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_tos_u8], 0xffffffffffffff31}}], 0x2, 0x0) [ 228.918927][T10939] AppArmor: change_hat: Invalid input '0' 14:04:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:04:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006980)=[{{&(0x7f0000000580)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000880)="a2", 0x1}], 0x3, &(0x7f0000005a40)=[@ip_tos_u8], 0xffffffffffffff31}}], 0x2, 0x0) 14:04:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='changehat 0'], 0x1d) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:04:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) [ 229.001276][T10953] AppArmor: change_hat: Invalid input '0' 14:04:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='changehat 0'], 0x1d) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:04:05 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 14:04:05 executing program 1: clone(0x2000200cffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x1c, 0x10000015, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}]}, 0x1c}}, 0x0) [ 229.067735][T10969] AppArmor: change_hat: Invalid input '0' 14:04:05 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) 14:04:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000100)=0x6) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) 14:04:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000001c0)={'veth1_to_bridge\x00', @ifru_names}) 14:04:06 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f00000000c0)) 14:04:06 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040), 0x4) 14:04:06 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f0000000000)) 14:04:06 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=@hat={'changehat '}, 0x1d) socket$nl_sock_diag(0x10, 0x3, 0x4) 14:04:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 14:04:06 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) fanotify_mark(r0, 0x46, 0x40000011, 0xffffffffffffff9c, 0x0) 14:04:06 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x145042, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) pwritev(r1, &(0x7f0000000080), 0xc3, 0x0, 0x0) 14:04:06 executing program 2: add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 229.618563][T10980] AppArmor: change_hat: Invalid input '0' 14:04:06 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x145042, 0x0) r3 = memfd_create(&(0x7f0000000340)='\xe58\xb9C;`\xb6p\x98\xcf\x1dT\b$$+\x10\x00\x00\x00\x00\x00\x00\x00\x005ru\x13\x89W\xa03\xfe\xe82\xf6y\xea\x9a\x83L\xef\x1b I\xcf\x9a\x98\x16\fV=!-\x18RM4\xab\xd44\xa7\xe7\xa7\xa1<\xee \xc1}\xa0B\xb6~\xbb\rc\xd6\xd5\xf1g\xa5u+<\xdf?\xbf\x90\xc6< cn|\x19=:\xb3s\x12\xd2\xc9\xb6\x92\xef\xd7@\xe9\x8a\x18\xec\xe6\x1c\x03V\xab\x1f?p\x14t\x05\xcc\x00\xf8c\xa4\xca>\xaf\xb1\xc8@H[\\|rK\x9f\xe4_\xa4\xd28\b\x9b\x06\x99+GE\xdf\xcf\xbb]\x06\t\x1e\x1aw?w\xd5\xf3o\xc8\x15\xa3\xf8\xa1\xff\x86;\xaeW\xc9\xe7!R\xe7\x91\x1c\xa9p<6%\x1a\xc2WE\xbc\xbd,\xf3\n\xadt}\xeeV\xbe?\xd2>\xfd\x99\xb8~\xff\x06\xf5\xc3\xe6t&\xb3\xfc\xd8\xe8\xa8=v\xea\xf2\x98\xb2iF\xb4r\x19.\t\x85\xddM\x11\x16>\x80\xf0\x1d \xb2\xa9@\x87\xf7\x98\x7f}\xc5yPk\x9e\xe5c\xd9\xf6\xac!\xdb\xf2k\xdc\xff\x10', 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x501082, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000100)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffffe}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYRESDEC=r6], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000480)={{r4}, 0x0, 0xe, @inherit={0x70, &(0x7f00000001c0)={0x1, 0x5, 0x1, 0xe7a8, {0x0, 0x80, 0x8001, 0x2, 0x5}, [0x7, 0x8, 0xfffffffffffffffc, 0x8, 0xffffffffffffffff]}}, @devid=r6}) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18180b, 0x0) sendfile(r2, r3, 0x0, 0x200000f) [ 229.952720][T11017] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 14:04:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x3, [@volatile, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}, @int, @union, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2d}]}, {0x0, [0x0]}}, 0x0, 0xbb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:04:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x21}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 229.973181][T11017] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 229.989435][ T46] audit: type=1800 audit(1607609046.169:71): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file1" dev="sda1" ino=16551 res=0 errno=0 14:04:06 executing program 2: add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/', 0x1, 0xfffffffffffffffe) [ 230.042088][T11027] device lo entered promiscuous mode 14:04:06 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self\x00', 0x0, 0x0) [ 230.088459][T11027] Y­4`Ò˜: renamed from lo 14:04:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r0) 14:04:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x39bfa512, 0x4) 14:04:06 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/nvram\x00', 0x2080, 0x0) [ 230.232984][ T46] audit: type=1800 audit(1607609046.409:72): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file1" dev="sda1" ino=16551 res=0 errno=0 14:04:06 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r1, &(0x7f0000000200)="2e038696dd2bb01e64597bf826269b4acc38b3e403dce89415534727e659b822d311894e07668907b924974db8ac4e61b2ded12f96cb3c1af8d5bd466545174136e0f16323795a32e41d6865bd14fe637617b9ef0e8b815dd3587d13998584feda27165823e3fe7f8f4dd730a0b9cfc428b34ed7c60b6d7b9f76dc2af526952bbc3f2c7012d5d077fe6a776bf91eab745c15ba3d", 0xffffff46}]) 14:04:09 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000001) 14:04:09 executing program 3: pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 14:04:09 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r1, &(0x7f0000000200)="2e038696dd2bb01e64597bf826269b4acc38b3e403dce89415534727e659b822d311894e07668907b924974db8ac4e61b2ded12f96cb3c1af8d5bd466545174136e0f16323795a32e41d6865bd14fe637617b9ef0e8b815dd3587d13998584feda27165823e3fe7f8f4dd730a0b9cfc428b34ed7c60b6d7b9f76dc2af526952bbc3f2c7012d5d077fe6a776bf91eab745c15ba3d", 0xffffff46}]) 14:04:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r3, &(0x7f0000000200)='.', 0x1}]) 14:04:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8001) 14:04:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x6}) 14:04:09 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28c}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:04:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x6}) 14:04:09 executing program 1: pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 14:04:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x6}) 14:04:09 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r1, &(0x7f0000000200)="2e038696dd2bb01e64597bf826269b4acc38b3e403dce89415534727e659b822d311894e07668907b924974db8ac4e61b2ded12f96cb3c1af8d5bd466545174136e0f16323795a32e41d6865bd14fe637617b9ef0e8b815dd3587d13998584feda27165823e3fe7f8f4dd730a0b9cfc428b34ed7c60b6d7b9f76dc2af526952bbc3f2c7012d5d077fe6a776bf91eab745c15ba3d", 0xffffff46}]) 14:04:09 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)) 14:04:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x6}) 14:04:09 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) 14:04:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x2, 0x0) 14:04:09 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x941, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x800) 14:04:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b400000002070102"], 0xb4}}, 0x0) [ 233.374189][T11116] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. 14:04:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b400000002070102"], 0xb4}}, 0x0) [ 233.444466][T11121] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. 14:04:09 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r1, &(0x7f0000000200)="2e038696dd2bb01e64597bf826269b4acc38b3e403dce89415534727e659b822d311894e07668907b924974db8ac4e61b2ded12f96cb3c1af8d5bd466545174136e0f16323795a32e41d6865bd14fe637617b9ef0e8b815dd3587d13998584feda27165823e3fe7f8f4dd730a0b9cfc428b34ed7c60b6d7b9f76dc2af526952bbc3f2c7012d5d077fe6a776bf91eab745c15ba3d", 0xffffff46}]) 14:04:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c, 0x2, {{0x0, 0x1000, 0x40000}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x74}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = creat(&(0x7f0000001200)='./file0\x00', 0x0) dup2(r0, r7) sendto$inet6(r7, &(0x7f0000000100)="0204000003006039001e2b7be7d0", 0xe, 0x0, 0x0, 0x0) 14:04:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b400000002070102"], 0xb4}}, 0x0) [ 233.561402][T11126] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.580720][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 14:04:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b400000002070102"], 0xb4}}, 0x0) [ 233.624801][T11133] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.647701][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 14:04:10 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f0000000040)) 14:04:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 14:04:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003780)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) 14:04:10 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:04:10 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket(0x2, 0x3, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:04:10 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:04:10 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x800000)=nil, 0x800000, 0x2, 0x12, r1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 14:04:10 executing program 0: open$dir(&(0x7f0000000100)='./file0\x00', 0x1c1040, 0x0) 14:04:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs, 0x6e) 14:04:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x800) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 14:04:10 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x100) 14:04:10 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'ip6_vti0\x00'}) 14:04:10 executing program 0: open$dir(&(0x7f0000000100)='./file0\x00', 0x1c1040, 0x0) 14:04:10 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') 14:04:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000430005"], 0x1c}}, 0x0) 14:04:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x18}}, 0x0) [ 234.365677][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:04:10 executing program 0: open$dir(&(0x7f0000000100)='./file0\x00', 0x1c1040, 0x0) 14:04:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000400)=0x3, 0x4) 14:04:10 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)={0x14, 0x14, 0x1}, 0x14}}, 0x0) 14:04:10 executing program 1: ioprio_set$uid(0x0, 0x0, 0x6000) 14:04:10 executing program 0: open$dir(&(0x7f0000000100)='./file0\x00', 0x1c1040, 0x0) 14:04:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000014b46000000800000007275c9e9", @ANYRES64=r0], 0x24}}, 0x0) 14:04:10 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), 0x4) 14:04:10 executing program 3: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) [ 234.522684][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.544069][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:04:10 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) 14:04:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x2, 0x4, 0x7ff, 0x1}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r0, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 14:04:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x7, 0x4, 0x7ff, 0x1}, 0x40) 14:04:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5, 0x0, 0x0, 0xe, 0x3f3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000180)=""/4096, 0x2f, 0x1000, 0x1}, 0x20) 14:04:10 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000100)) 14:04:10 executing program 1: r0 = add_key$keyring(&(0x7f0000002b80)='keyring\x00', &(0x7f0000002bc0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 14:04:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x2, 0x4, 0x7ff, 0x1}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r0, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 14:04:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x2, 0x4, 0x7ff, 0x1}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r0, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 14:04:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) 14:04:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x5, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000180)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 14:04:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x2, 0x4, 0x7ff, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000840), 0x0, &(0x7f0000000040)="81", &(0x7f0000000100), 0x6, r0}, 0x38) 14:04:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x2, 0x4, 0x7ff, 0x1}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x20) 14:04:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x2, 0x4, 0x7ff, 0x1}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 14:04:10 executing program 1: pipe2$9p(&(0x7f0000000980), 0x0) 14:04:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1fffff, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 14:04:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1fffff, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000013", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 14:04:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_to_team\x00', '\x00', {}, {}, 0x3b7}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a7a9"}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x28, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 14:04:10 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001240)={@empty=[0xff], @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "06d677", 0x8, 0x0, 0x0, @local, @private0, {[@srh]}}}}}, 0x0) [ 234.818768][T11257] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 234.831866][T11257] EXT4-fs (loop2): group descriptors corrupted! 14:04:11 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001240)={@empty=[0xff], @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "06d677", 0x8, 0x0, 0x0, @local, @private0, {[@srh]}}}}}, 0x0) 14:04:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4", 0x42, 0x400}], 0x0, &(0x7f0000013a00)=ANY=[]) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d80)={0x10, 0x0, {0x0, @usage=0x1, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x0, 0x0, @struct={0x0, 0x6}, 0x7fff, 0xfffffff9, [0x81, 0x40]}, {0x1, @struct={0x0, 0x3f}, 0x0, 0x800, 0x0, 0x6, 0x7, 0x0, 0x0, @usage=0x3, 0x0, 0x0, [0x4, 0x4, 0x0, 0x879, 0x419ce6d9]}, {0x0, @usage=0x4fb, 0x0, 0x2, 0xb741, 0x0, 0x3, 0x6f, 0x0, @usage, 0x1, 0x0, [0x3f, 0xffffffffffffffff, 0x2]}}) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0xb4de, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000300)={0x0, r2}) [ 234.842761][T11264] EXT4-fs error (device loop0): ext4_fill_super:4954: inode #2: comm syz-executor.0: iget: root inode unallocated [ 234.873604][T11264] EXT4-fs (loop0): get root inode failed [ 234.882197][T11264] EXT4-fs (loop0): mount failed 14:04:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f", 0x44, 0x400}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000013a00)=ANY=[]) setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x101101) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d80)={0x10, 0x0, {0x1, @usage=0x1, 0x0, 0x204f, 0x10001, 0x100000001, 0x1, 0x0, 0x2, @struct={0x0, 0x6}, 0x7fff, 0xfffffff9, [0x81, 0x40, 0x5, 0x7ff]}, {0x1, @struct={0x9, 0x3f}, 0x0, 0x800, 0x0, 0x6, 0x7, 0x1, 0x0, @usage=0x3, 0x88b, 0x4bc, [0x4, 0x4, 0x1, 0x879, 0x419ce6d9]}, {0x0, @usage=0x4fb, 0x0, 0x2, 0x0, 0x0, 0x3, 0x6f, 0x5, @usage, 0x1, 0xfffffffd, [0x3f, 0xffffffffffffffff, 0x0, 0x80000000, 0x8]}, {0x0, 0x1}}) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0xb4de, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000300)={0x19f, r2}) 14:04:11 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001240)={@empty=[0xff], @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "06d677", 0x8, 0x0, 0x0, @local, @private0, {[@srh]}}}}}, 0x0) [ 236.247312][ C0] hrtimer: interrupt took 44767 ns [ 284.348223][ C0] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 284.533668][ T8892] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 284.547441][ T8892] CPU: 2 PID: 8892 Comm: rsyslogd Not tainted 5.10.0-rc7-syzkaller #0 [ 284.557354][ T8892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 284.557354][ T8892] Call Trace: [ 284.557354][ T8892] dump_stack+0x107/0x163 [ 284.557354][ T8892] dump_header+0x106/0x624 [ 284.615813][ T8892] oom_kill_process.cold+0x10/0x15 [ 284.615813][ T8892] out_of_memory+0x10f1/0x13f0 [ 284.615813][ T8892] ? oom_killer_disable+0x270/0x270 [ 284.615813][ T8892] ? mutex_trylock+0x246/0x2c0 [ 284.615813][ T8892] ? __alloc_pages_slowpath.constprop.0+0xc33/0x2510 [ 284.615813][ T8892] __alloc_pages_slowpath.constprop.0+0x1e95/0x2510 [ 284.615813][ T8892] ? warn_alloc+0x120/0x120 [ 284.615813][ T8892] ? fs_reclaim_release+0x90/0xd0 [ 284.615813][ T8892] __alloc_pages_nodemask+0x5f0/0x730 [ 284.615813][ T8892] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 284.615813][ T8892] ? find_get_entry+0x26c/0x570 [ 284.615813][ T8892] alloc_pages_current+0x191/0x2a0 [ 284.615813][ T8892] __page_cache_alloc+0x2ce/0x360 [ 284.615813][ T8892] ? read_pages+0x8d0/0x8d0 [ 284.615813][ T8892] pagecache_get_page+0x392/0x1460 [ 284.615813][ T8892] filemap_fault+0x1a37/0x2940 [ 284.615813][ T8892] ? read_cache_page_gfp+0x30/0x30 [ 284.615813][ T8892] ? delete_from_page_cache+0x240/0x240 [ 284.615813][ T8892] ? count_memcg_event_mm.part.0+0x151/0x280 [ 284.615813][ T8892] ext4_filemap_fault+0x87/0xc0 [ 284.615813][ T8892] __do_fault+0x10d/0x4d0 [ 284.615813][ T8892] handle_mm_fault+0x3198/0x55d0 [ 284.615813][ T8892] ? vm_iomap_memory+0x190/0x190 [ 284.615813][ T8892] do_user_addr_fault+0x55b/0xb40 [ 284.615813][ T8892] exc_page_fault+0x9e/0x180 [ 284.615813][ T8892] ? asm_exc_page_fault+0x8/0x30 [ 284.615813][ T8892] asm_exc_page_fault+0x1e/0x30 [ 284.615813][ T8892] RIP: 0033:0x7fd65af6edb4 [ 284.615813][ T8892] Code: Unable to access opcode bytes at RIP 0x7fd65af6ed8a. [ 284.615813][ T8892] RSP: 002b:00007fd65993de40 EFLAGS: 00010203 [ 284.615813][ T8892] RAX: 0000000000000053 RBX: 0000000001c05170 RCX: 00007fd65c39e1fd [ 284.868127][ T8892] RDX: 0000000000000053 RSI: 00007fd65b1725a0 RDI: 0000000000000000 [ 284.868127][ T8892] RBP: 0000000000000000 R08: 0000000001bf0260 R09: 0000000004000001 [ 284.868127][ T8892] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000065e420 [ 284.868127][ T8892] R13: 00007fd65993e9c0 R14: 00007fd65c9e3040 R15: 0000000000000003 [ 284.927027][ T8892] Mem-Info: [ 284.932089][ T8892] active_anon:3904 inactive_anon:119796 isolated_anon:0 [ 284.932089][ T8892] active_file:603 inactive_file:301 isolated_file:32 [ 284.932089][ T8892] unevictable:0 dirty:133 writeback:35 [ 284.932089][ T8892] slab_reclaimable:12812 slab_unreclaimable:122704 [ 284.932089][ T8892] mapped:35522 shmem:610 pagetables:1148 bounce:0 [ 284.932089][ T8892] free:10748 free_pcp:1182 free_cma:0 [ 284.984155][ T8892] Node 0 active_anon:15584kB inactive_anon:209944kB active_file:380kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:356kB dirty:12kB writeback:12kB shmem:1872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 94208kB writeback_tmp:0kB kernel_stack:8800kB all_unreclaimable? yes [ 285.024503][ T8892] Node 1 active_anon:32kB inactive_anon:269240kB active_file:2036kB inactive_file:1228kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:141728kB dirty:520kB writeback:128kB shmem:568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:1600kB all_unreclaimable? no [ 285.073303][ T8892] Node 0 DMA free:2120kB min:2780kB low:2960kB high:3140kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:13076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.129997][ T8892] lowmem_reserve[]: 0 468 468 468 468 [ 285.142678][ T8892] Node 0 DMA32 free:8324kB min:22196kB low:27744kB high:33292kB reserved_highatomic:2048KB active_anon:15584kB inactive_anon:196868kB active_file:380kB inactive_file:0kB unevictable:0kB writepending:24kB present:1032192kB managed:486276kB mlocked:0kB pagetables:2080kB bounce:0kB free_pcp:1240kB local_pcp:116kB free_cma:0kB [ 285.194401][ T8892] lowmem_reserve[]: 0 0 0 0 0 [ 285.203276][ T8892] Node 1 DMA32 free:34328kB min:67176kB low:78336kB high:89496kB reserved_highatomic:2048KB active_anon:32kB inactive_anon:269240kB active_file:1512kB inactive_file:1228kB unevictable:0kB writepending:648kB present:1048436kB managed:965508kB mlocked:0kB pagetables:2508kB bounce:0kB free_pcp:3384kB local_pcp:1460kB free_cma:0kB [ 285.245731][ T8892] lowmem_reserve[]: 0 0 0 0 0 [ 285.252492][ T8892] Node 0 DMA: 0*4kB 1*8kB (H) 0*16kB 2*32kB (UH) 0*64kB 2*128kB (UH) 1*256kB (H) 1*512kB (H) 1*1024kB (U) 0*2048kB 0*4096kB = 2120kB [ 285.271945][ T8892] Node 0 DMA32: 191*4kB (UME) 101*8kB (UME) 22*16kB (UMEH) 49*32kB (UME) 18*64kB (ME) 15*128kB (UMEH) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 8356kB [ 285.296854][ T8892] Node 1 DMA32: 529*4kB (UM) 110*8kB (UMEH) 55*16kB (ME) 137*32kB (UMEH) 67*64kB (UMH) 28*128kB (UM) 17*256kB (UM) 17*512kB (UM) 3*1024kB (MH) 1*2048kB (M) 0*4096kB = 34308kB [ 285.324249][ T8892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.340321][ T8892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.355852][ T8892] 1182 total pagecache pages [ 285.362710][ T8892] 0 pages in swap cache [ 285.368170][ T8892] Swap cache stats: add 0, delete 0, find 0/0 [ 285.376002][ T8892] Free swap = 0kB [ 285.381155][ T8892] Total swap = 0kB [ 285.386122][ T8892] 524155 pages RAM [ 285.390871][ T8892] 0 pages HighMem/MovableOnly [ 285.403491][ T8892] 157232 pages reserved [ 285.409640][ T8892] 0 pages cma reserved [ 285.415631][ T8892] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=rsyslogd,pid=8892,uid=0 [ 285.437506][ T8892] Out of memory (oom_kill_allocating_task): Killed process 8887 (rsyslogd) total-vm:57056kB, anon-rss:756kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 285.476417][ T1671] oom_reaper: reaped process 8887 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 291.782993][T11041] syz-executor.0: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 291.798211][ T3082] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.787891][T11041] CPU: 2 PID: 11041 Comm: syz-executor.0 Not tainted 5.10.0-rc7-syzkaller #0 [ 291.787891][T11041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 291.787891][T11041] Call Trace: [ 291.787891][T11041] dump_stack+0x107/0x163 [ 291.807891][ T3082] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.787891][T11041] warn_alloc.cold+0x87/0x17a [ 291.838082][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838090][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838098][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838105][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838117][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838124][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838130][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838137][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838148][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838155][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838162][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838168][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838191][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838198][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838205][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838211][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838223][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838230][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838236][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838242][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838254][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838261][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838267][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838273][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838285][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838292][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838298][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838304][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838317][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838323][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838330][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838336][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.838347][ T1720] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 291.838354][ T1720] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 291.838360][ T1720] node 0: slabs: 83, objs: 2075, free: 0 [ 291.838366][ T1720] node 1: slabs: 831, objs: 18942, free: 119 [ 291.807891][ T3082] node 0: slabs: 83, objs: 2075, free: 0 [ 291.807891][ T3082] node 1: slabs: 831, objs: 18942, free: 119 [ 291.787891][T11041] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 291.787891][T11041] ? wakeup_kswapd+0x15b/0x640 [ 291.787891][T11041] ? __zone_watermark_ok+0x440/0x440 [ 291.787891][T11041] ? wake_all_kswapds+0x143/0x2c0 [ 291.787891][T11041] __alloc_pages_slowpath.constprop.0+0x2026/0x2510 [ 291.787891][T11041] ? __lock_acquire+0x16b7/0x5500 [ 291.787891][T11041] ? warn_alloc+0x120/0x120 [ 291.787891][T11041] ? __lock_acquire+0x16b7/0x5500 [ 291.787891][T11041] ? __zone_watermark_ok+0x440/0x440 [ 291.787891][T11041] __alloc_pages_nodemask+0x5f0/0x730 [ 291.787891][T11041] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 291.787891][T11041] ? __slab_alloc.constprop.0+0x52/0xe0 [ 291.787891][T11041] alloc_pages_current+0x191/0x2a0 [ 291.787891][T11041] allocate_slab+0x2d9/0x4e0 [ 291.787891][T11041] ___slab_alloc+0x476/0x790 [ 291.787891][T11041] ? __sigqueue_alloc+0x236/0x550 [ 291.787891][T11041] ? find_held_lock+0x2d/0x110 [ 291.787891][T11041] ? __sigqueue_alloc+0x236/0x550 [ 291.787891][T11041] ? __slab_alloc.constprop.0+0x52/0xe0 [ 291.787891][T11041] __slab_alloc.constprop.0+0x52/0xe0 [ 291.787891][T11041] ? __sigqueue_alloc+0x236/0x550 [ 291.787891][T11041] kmem_cache_alloc+0x36e/0x440 [ 291.787891][T11041] __sigqueue_alloc+0x236/0x550 [ 291.787891][T11041] __send_signal+0x62d/0xf90 [ 291.787891][T11041] force_sig_info_to_task+0x2a0/0x3a0 [ 291.787891][T11041] force_sig_fault+0xb0/0xf0 [ 291.787891][T11041] ? force_sig_fault_to_task+0xe0/0xe0 [ 291.787891][T11041] ? pgtable_bad+0x90/0x90 [ 291.787891][T11041] ? _down_write_nest_lock+0x150/0x150 [ 291.787891][T11041] __bad_area_nosemaphore+0x2f3/0x400 [ 291.787891][T11041] do_user_addr_fault+0x7d7/0xb40 [ 291.787891][T11041] exc_page_fault+0x9e/0x180 [ 291.787891][T11041] ? asm_exc_page_fault+0x8/0x30 [ 291.787891][T11041] asm_exc_page_fault+0x1e/0x30 [ 291.787891][T11041] RIP: 0023:0x804d836 [ 291.787891][T11041] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b [ 291.787891][T11041] RSP: 002b:00000000f552b100 EFLAGS: 00010202 [ 291.787891][T11041] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f552b0f0 [ 291.787891][T11041] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000 [ 291.787891][T11041] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 291.787891][T11041] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 291.787891][T11041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.787891][T11041] Mem-Info: [ 291.787891][T11041] active_anon:3903 inactive_anon:119609 isolated_anon:0 [ 291.787891][T11041] active_file:300 inactive_file:84 isolated_file:32 [ 291.787891][T11041] unevictable:0 dirty:133 writeback:35 [ 291.787891][T11041] slab_reclaimable:12812 slab_unreclaimable:127979 [ 291.787891][T11041] mapped:34998 shmem:610 pagetables:1148 bounce:0 [ 291.787891][T11041] free:6635 free_pcp:934 free_cma:0 [ 291.787891][T11041] Node 0 active_anon:15580kB inactive_anon:209164kB active_file:380kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:356kB dirty:12kB writeback:12kB shmem:1872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 94208kB writeback_tmp:0kB kernel_stack:8704kB all_unreclaimable? yes [ 291.787891][T11041] Node 1 active_anon:32kB inactive_anon:269272kB active_file:820kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:139636kB dirty:520kB writeback:128kB shmem:568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:1600kB all_unreclaimable? no [ 291.787891][T11041] Node 0 DMA free:2120kB min:2780kB low:2960kB high:3140kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:13076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.787891][T11041] lowmem_reserve[]: 0 468 468 468 468 [ 291.787891][T11041] Node 0 DMA32 free:8320kB min:22196kB low:27744kB high:33292kB reserved_highatomic:2048KB active_anon:15580kB inactive_anon:196088kB active_file:380kB inactive_file:0kB unevictable:0kB writepending:24kB present:1032192kB managed:486276kB mlocked:0kB pagetables:2080kB bounce:0kB free_pcp:1796kB local_pcp:676kB free_cma:0kB [ 291.787891][T11041] lowmem_reserve[]: 0 0 0 0 0 [ 291.787891][T11041] Node 1 DMA32 free:16100kB min:77416kB low:88576kB high:99736kB reserved_highatomic:2048KB active_anon:32kB inactive_anon:269272kB active_file:820kB inactive_file:352kB unevictable:0kB writepending:648kB present:1048436kB managed:965508kB mlocked:0kB pagetables:2508kB bounce:0kB free_pcp:1940kB local_pcp:248kB free_cma:0kB [ 291.787891][T11041] lowmem_reserve[]: 0 0 0 0 0 [ 291.787891][T11041] Node 0 DMA: 0*4kB 1*8kB (H) 0*16kB 2*32kB (UH) 0*64kB 2*128kB (UH) 1*256kB (H) 1*512kB (H) 1*1024kB (U) 0*2048kB 0*4096kB = 2120kB [ 291.787891][T11041] Node 0 DMA32: 254*4kB (MEH) 103*8kB (UME) 21*16kB (MEH) 45*32kB (ME) 18*64kB (ME) 14*128kB (MEH) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 8352kB [ 291.787891][T11041] Node 1 DMA32: 519*4kB (UM) 123*8kB (ME) 65*16kB (ME) 49*32kB (UME) 29*64kB (UM) 13*128kB (UMH) 7*256kB (MH) 10*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 16100kB [ 291.787891][T11041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.787891][T11041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.787891][T11041] 1011 total pagecache pages [ 291.787891][T11041] 0 pages in swap cache [ 291.787891][T11041] Swap cache stats: add 0, delete 0, find 0/0 [ 291.787891][T11041] Free swap = 0kB [ 291.787891][T11041] Total swap = 0kB [ 291.787891][T11041] 524155 pages RAM [ 291.787891][T11041] 0 pages HighMem/MovableOnly [ 291.787891][T11041] 157232 pages reserved [ 291.787891][T11041] 0 pages cma reserved [ 301.568422][ T9042] udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 301.589158][ T9042] CPU: 1 PID: 9042 Comm: udevd Not tainted 5.10.0-rc7-syzkaller #0 [ 301.598833][ T9042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 301.598833][ T9042] Call Trace: [ 301.598833][ T9042] dump_stack+0x107/0x163 [ 301.598833][ T9042] dump_header+0x106/0x624 [ 301.598833][ T9042] oom_kill_process.cold+0x10/0x15 [ 301.664315][T11041] slab_out_of_memory: 71800 callbacks suppressed [ 301.664325][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.598833][ T9042] out_of_memory+0x358/0x13f0 [ 301.667883][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.667883][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.598833][ T9042] ? oom_killer_disable+0x270/0x270 [ 301.667883][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.598833][ T9042] ? mutex_trylock+0x246/0x2c0 [ 301.745778][ T9066] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.752767][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.752775][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.752782][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.752789][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.752812][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.752819][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.752825][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.752831][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.752854][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.752861][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.752867][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.752873][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.752901][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.752908][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.752914][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.752920][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.753065][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.753073][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.753079][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.753085][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.753112][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.753119][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.753125][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.753131][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.753153][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.753160][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.753166][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.753172][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.753194][T11041] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 301.753201][T11041] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 301.753207][T11041] node 0: slabs: 5989, objs: 215604, free: 0 [ 301.753213][T11041] node 1: slabs: 58375, objs: 2101500, free: 91 [ 301.598833][ T9042] ? __alloc_pages_slowpath.constprop.0+0xc33/0x2510 [ 301.598833][ T9042] __alloc_pages_slowpath.constprop.0+0x1e95/0x2510 [ 301.755440][ T9066] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 301.755440][ T9066] node 0: slabs: 83, objs: 2075, free: 0 [ 301.598833][ T9042] ? warn_alloc+0x120/0x120 [ 301.598833][ T9042] ? fs_reclaim_release+0x90/0xd0 [ 301.598833][ T9042] __alloc_pages_nodemask+0x5f0/0x730 [ 301.755440][ T9066] node 1: slabs: 901, objs: 19652, free: 9 [ 301.598833][ T9042] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 301.831777][T11041] warn_alloc: 76020 callbacks suppressed [ 301.831790][T11041] syz-executor.0: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null) [ 301.598833][ T9042] ? find_get_entry+0x26c/0x570 [ 301.837973][T11041] ,cpuset= [ 301.598833][ T9042] alloc_pages_current+0x191/0x2a0 [ 301.598833][ T9042] __page_cache_alloc+0x2ce/0x360 [ 301.598833][ T9042] ? read_pages+0x8d0/0x8d0 [ 301.598833][ T9042] pagecache_get_page+0x392/0x1460 [ 301.598833][ T9042] filemap_fault+0x1a37/0x2940 [ 301.598833][ T9042] ? read_cache_page_gfp+0x30/0x30 [ 301.598833][ T9042] ? handle_mm_fault+0x4990/0x55d0 [ 301.598833][ T9042] ? lock_downgrade+0x6d0/0x6d0 [ 301.598833][ T9042] ext4_filemap_fault+0x87/0xc0 [ 301.598833][ T9042] __do_fault+0x10d/0x4d0 [ 301.598833][ T9042] handle_mm_fault+0x3198/0x55d0 [ 301.598833][ T9042] ? vm_iomap_memory+0x190/0x190 [ 301.598833][ T9042] ? vmacache_update+0xce/0x140 [ 301.598833][ T9042] do_user_addr_fault+0x55b/0xb40 [ 301.837973][T11041] syz0 [ 301.598833][ T9042] exc_page_fault+0x9e/0x180 [ 301.598833][ T9042] ? asm_exc_page_fault+0x8/0x30 [ 301.598833][ T9042] asm_exc_page_fault+0x1e/0x30 [ 301.598833][ T9042] RIP: 0033:0x7ff4e056b943 [ 301.598833][ T9042] Code: Unable to access opcode bytes at RIP 0x7ff4e056b919. [ 301.598833][ T9042] RSP: 002b:00007fff5d801a18 EFLAGS: 00010246 [ 301.598833][ T9042] RAX: 0000000000000000 RBX: 00000000022a9250 RCX: 00007ff4e056b943 [ 301.598833][ T9042] RDX: 0000000000000004 RSI: 00007fff5d801ae0 RDI: 0000000000000007 [ 301.598833][ T9042] RBP: 0000000000625500 R08: 0000000000002352 R09: 00007fff5d932090 [ 301.598833][ T9042] R10: 000000000000ee42 R11: 0000000000000246 R12: 00000000022b4330 [ 301.598833][ T9042] R13: 00007fff5d802b37 R14: 0000000000000005 R15: 00000000022a9250 [ 301.913854][ C1] aoe: skb alloc failure [ 301.837973][T11041] ,mems_allowed=0-1 [ 301.837973][T11041] CPU: 2 PID: 11041 Comm: syz-executor.0 Not tainted 5.10.0-rc7-syzkaller #0 [ 301.837973][T11041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 301.837973][T11041] Call Trace: [ 301.837973][T11041] dump_stack+0x107/0x163 [ 301.837973][T11041] warn_alloc.cold+0x87/0x17a [ 301.837973][T11041] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 301.837973][T11041] ? wakeup_kswapd+0x15b/0x640 [ 301.837973][T11041] ? __zone_watermark_ok+0x440/0x440 [ 301.837973][T11041] ? wake_all_kswapds+0x143/0x2c0 [ 301.951035][ C1] aoe: skb alloc failure [ 301.837973][T11041] __alloc_pages_slowpath.constprop.0+0x2026/0x2510 [ 301.837973][T11041] ? __lock_acquire+0x16b7/0x5500 [ 301.837973][T11041] ? warn_alloc+0x120/0x120 [ 301.837973][T11041] ? __lock_acquire+0x16b7/0x5500 [ 301.837973][T11041] ? __zone_watermark_ok+0x440/0x440 [ 301.837973][T11041] __alloc_pages_nodemask+0x5f0/0x730 [ 301.985698][ C1] aoe: skb alloc failure [ 301.837973][T11041] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 301.837973][T11041] ? __slab_alloc.constprop.0+0x52/0xe0 [ 301.837973][T11041] alloc_pages_current+0x191/0x2a0 [ 301.837973][T11041] allocate_slab+0x2d9/0x4e0 [ 301.837973][T11041] ___slab_alloc+0x476/0x790 [ 301.837973][T11041] ? __sigqueue_alloc+0x236/0x550 [ 301.837973][T11041] ? find_held_lock+0x2d/0x110 [ 301.837973][T11041] ? __sigqueue_alloc+0x236/0x550 [ 301.837973][T11041] ? __slab_alloc.constprop.0+0x52/0xe0 [ 301.837973][T11041] __slab_alloc.constprop.0+0x52/0xe0 [ 301.837973][T11041] ? __sigqueue_alloc+0x236/0x550 [ 301.837973][T11041] kmem_cache_alloc+0x36e/0x440 [ 301.837973][T11041] __sigqueue_alloc+0x236/0x550 [ 301.837973][T11041] __send_signal+0x62d/0xf90 [ 301.837973][T11041] force_sig_info_to_task+0x2a0/0x3a0 [ 301.837973][T11041] force_sig_fault+0xb0/0xf0 [ 301.837973][T11041] ? force_sig_fault_to_task+0xe0/0xe0 [ 301.837973][T11041] ? pgtable_bad+0x90/0x90 [ 301.837973][T11041] ? _down_write_nest_lock+0x150/0x150 [ 301.837973][T11041] __bad_area_nosemaphore+0x2f3/0x400 [ 301.837973][T11041] do_user_addr_fault+0x7d7/0xb40 [ 301.837973][T11041] exc_page_fault+0x9e/0x180 [ 301.837973][T11041] ? asm_exc_page_fault+0x8/0x30 [ 301.837973][T11041] asm_exc_page_fault+0x1e/0x30 [ 302.013720][ C1] aoe: skb alloc failure [ 301.837973][T11041] RIP: 0023:0x804d836 [ 301.837973][T11041] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b [ 301.837973][T11041] RSP: 002b:00000000f552b100 EFLAGS: 00010202 [ 301.837973][T11041] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f552b0f0 [ 301.837973][T11041] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000 [ 301.837973][T11041] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 301.837973][T11041] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 301.837973][T11041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.837973][T11041] Mem-Info: [ 301.837973][T11041] active_anon:3903 inactive_anon:119609 isolated_anon:0 [ 301.837973][T11041] active_file:80 inactive_file:124 isolated_file:32 [ 301.837973][T11041] unevictable:0 dirty:133 writeback:35 [ 301.837973][T11041] slab_reclaimable:12812 slab_unreclaimable:128064 [ 301.837973][T11041] mapped:34846 shmem:610 pagetables:1148 bounce:0 [ 301.837973][T11041] free:6737 free_pcp:976 free_cma:0 [ 301.837973][T11041] Node 0 active_anon:15580kB inactive_anon:209164kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:12kB writeback:12kB shmem:1872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 94208kB writeback_tmp:0kB kernel_stack:8736kB all_unreclaimable? yes [ 301.837973][T11041] Node 1 active_anon:32kB inactive_anon:269272kB active_file:268kB inactive_file:524kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:139372kB dirty:520kB writeback:128kB shmem:568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:1632kB all_unreclaimable? no [ 301.837973][T11041] Node 0 DMA free:2120kB min:732kB low:912kB high:1092kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:13076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.837973][T11041] lowmem_reserve[]: [ 302.051366][ C1] aoe: skb alloc failure [ 301.837973][T11041] 0 468 468 468 468 [ 301.837973][T11041] Node 0 DMA32 free:8228kB min:22196kB low:27744kB high:33292kB reserved_highatomic:2048KB active_anon:15580kB inactive_anon:196088kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:24kB present:1032192kB managed:486276kB mlocked:0kB pagetables:2080kB bounce:0kB free_pcp:1772kB local_pcp:736kB free_cma:0kB [ 301.837973][T11041] lowmem_reserve[]: 0 0 0 0 0 [ 301.837973][T11041] Node 1 DMA32 free:16600kB min:77416kB low:88576kB high:99736kB reserved_highatomic:2048KB active_anon:32kB inactive_anon:269272kB active_file:596kB inactive_file:324kB unevictable:0kB writepending:648kB present:1048436kB managed:965508kB mlocked:0kB pagetables:2508kB bounce:0kB free_pcp:2132kB local_pcp:128kB free_cma:0kB [ 301.837973][T11041] lowmem_reserve[]: 0 0 0 0 0 [ 301.837973][T11041] Node 0 DMA: 0*4kB 1*8kB (H) 0*16kB 2*32kB (UH) 0*64kB 2*128kB (UH) 1*256kB (H) 1*512kB (H) 1*1024kB (U) 0*2048kB 0*4096kB = 2120kB [ 301.837973][T11041] Node 0 DMA32: 283*4kB (UMEH) [ 302.083938][ C1] aoe: skb alloc failure [ 301.837973][T11041] 103*8kB (UME) 20*16kB (MEH) 45*32kB (ME) 17*64kB (ME) 13*128kB (MEH) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 8260kB [ 301.837973][T11041] Node 1 DMA32: 507*4kB (UM) 116*8kB (UMEH) 55*16kB [ 302.123242][ C1] aoe: skb alloc failure [ 301.837973][T11041] (ME) 47*32kB (ME) 32*64kB (MH) 14*128kB (MH) 6*256kB (M) 9*512kB (MH) 1*1024kB (U) 0*2048kB 0*4096kB = 16348kB [ 301.837973][T11041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 301.837973][T11041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 301.837973][T11041] 836 total pagecache pages [ 301.837973][T11041] 0 pages in swap cache [ 301.837973][T11041] Swap cache stats: add 0, delete 0, find 0/0 [ 301.837973][T11041] Free swap = 0kB [ 301.837973][T11041] Total swap = 0kB [ 301.837973][T11041] 524155 pages RAM [ 301.837973][T11041] 0 pages HighMem/MovableOnly [ 301.837973][T11041] 157232 pages reserved [ 301.837973][T11041] 0 pages cma reserved [ 302.136736][ C2] ------------[ cut here ]------------ [ 302.149614][ C1] aoe: skb alloc failure [ 302.149624][ C1] aoe: skb alloc failure [ 302.149633][ C1] aoe: skb alloc failure [ 302.149642][ C1] aoe: skb alloc failure [ 302.149650][ C1] aoe: skb alloc failure [ 302.149659][ C1] aoe: skb alloc failure [ 302.149674][ C1] aoe: skb alloc failure [ 302.149682][ C1] aoe: skb alloc failure [ 302.149691][ C1] aoe: skb alloc failure [ 302.149700][ C1] aoe: skb alloc failure [ 302.174310][ C2] HSR: Could not send supervision frame [ 302.186860][ C1] aoe: skb alloc failure [ 302.186870][ C1] aoe: skb alloc failure [ 302.186883][ C1] aoe: skb alloc failure [ 302.201259][ C2] WARNING: CPU: 2 PID: 11041 at net/hsr/hsr_device.c:299 send_hsr_supervision_frame+0x889/0xb40 [ 302.214877][ C1] aoe: skb alloc failure [ 302.230665][ C2] Modules linked in: [ 302.244267][ C1] aoe: skb alloc failure [ 302.261494][ C2] [ 302.278309][ C1] aoe: skb alloc failure [ 302.278327][ C1] aoe: skb alloc failure [ 302.300441][ C2] CPU: 2 PID: 11041 Comm: syz-executor.0 Not tainted 5.10.0-rc7-syzkaller #0 [ 302.300453][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 302.312750][ C1] aoe: skb alloc failure [ 302.312765][ C1] aoe: skb alloc failure [ 302.327076][ C2] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 302.341314][ C1] aoe: skb alloc failure [ 302.341323][ C1] aoe: skb alloc failure [ 302.341332][ C1] aoe: skb alloc failure [ 302.341342][ C1] aoe: skb alloc failure [ 302.356405][ C2] Code: 04 31 ff 89 de e8 57 84 cd f8 84 db 0f 85 8b fd ff ff e8 3a 8c cd f8 48 c7 c7 60 e5 6b 8a c6 05 d1 2c 36 04 01 e8 e3 fa 09 00 <0f> 0b e9 6c fd ff ff e8 1b 8c cd f8 41 be 42 00 00 00 ba 01 00 00 [ 302.356413][ C2] RSP: 0000:ffffc90000520c70 EFLAGS: 00010286 [ 302.356424][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 302.356430][ C2] RDX: ffff88806c6c0000 RSI: ffffffff8158c835 RDI: fffff520000a4180 [ 302.356436][ C2] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc2747 [ 302.356442][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888012ad8980 [ 302.356448][ C2] R13: 0000000000000000 R14: ffff88804dbf4ce8 R15: 0000000000000000 [ 302.356465][ C2] FS: 0000000000000000(0000) GS:ffff88802ce00000(0063) knlGS:00000000f552bb40 [ 302.356551][ C2] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 302.382438][ C1] aoe: skb alloc failure [ 302.382449][ C1] aoe: skb alloc failure [ 302.394425][ C2] CR2: 0000000000000054 CR3: 000000006d233000 CR4: 0000000000350ee0 [ 302.404519][ C1] aoe: skb alloc failure [ 302.415166][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.424787][ C1] aoe: skb alloc failure [ 302.424797][ C1] aoe: skb alloc failure [ 302.435747][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.449587][ C1] aoe: skb alloc failure [ 302.449599][ C1] aoe: skb alloc failure [ 302.459567][ C2] Call Trace: [ 302.477701][ C1] aoe: skb alloc failure [ 302.488524][ C2] [ 302.494589][ C1] aoe: skb alloc failure [ 302.507078][ C2] ? send_hsr_supervision_frame+0xb40/0xb40 [ 302.519172][ C1] aoe: skb alloc failure [ 302.529862][ C2] hsr_announce+0x122/0x320 [ 302.541803][ C1] aoe: skb alloc failure [ 302.541819][ C1] aoe: skb alloc failure [ 302.553313][ C2] ? send_hsr_supervision_frame+0xb40/0xb40 [ 302.553330][ C2] call_timer_fn+0x1a5/0x6b0 [ 302.553365][ C2] ? add_timer_on+0x4a0/0x4a0 [ 302.563595][ C1] aoe: skb alloc failure [ 302.563604][ C1] aoe: skb alloc failure [ 302.563613][ C1] aoe: skb alloc failure [ 302.563622][ C1] aoe: skb alloc failure [ 302.563631][ C1] aoe: skb alloc failure [ 302.572797][ C2] ? lock_downgrade+0x6d0/0x6d0 [ 302.581787][ C1] aoe: skb alloc failure [ 302.594659][ C2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.606426][ C1] aoe: skb alloc failure [ 302.617024][ C2] ? send_hsr_supervision_frame+0xb40/0xb40 [ 302.617041][ C2] __run_timers.part.0+0x67c/0xa50 [ 302.627960][ C1] aoe: skb alloc failure [ 302.627969][ C1] aoe: skb alloc failure [ 302.627978][ C1] aoe: skb alloc failure [ 302.627992][ C1] aoe: skb alloc failure [ 302.638264][ C2] ? call_timer_fn+0x6b0/0x6b0 [ 302.648995][ C1] aoe: skb alloc failure [ 302.655851][ C2] ? sched_clock_cpu+0x17b/0x1f0 [ 302.665399][ C1] aoe: skb alloc failure [ 302.676452][ C2] run_timer_softirq+0xb3/0x1d0 [ 302.686271][ C1] aoe: skb alloc failure [ 302.686281][ C1] aoe: skb alloc failure [ 302.686290][ C1] aoe: skb alloc failure [ 302.687502][ T9042] Mem-Info: [ 302.695753][ C2] __do_softirq+0x2a0/0x9f6 [ 302.695769][ C2] asm_call_irq_on_stack+0xf/0x20 [ 302.695775][ C2] [ 302.695788][ C2] do_softirq_own_stack+0xaa/0xd0 [ 302.695799][ C2] irq_exit_rcu+0x132/0x200 [ 302.695811][ C2] sysvec_apic_timer_interrupt+0x4d/0x100 [ 302.695820][ C2] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 302.695831][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 [ 302.695841][ C2] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ca 3a 6e f8 48 89 ef e8 52 ef 6e f8 f6 c7 02 75 1a 53 9d 01 00 00 00 e8 61 5b 63 f8 65 8b 05 8a 05 1a 77 85 c0 74 0a 5b [ 302.695847][ C2] RSP: 0000:ffffc90009f4fd18 EFLAGS: 00000246 [ 302.695858][ C2] RAX: 0000000005672599 RBX: 0000000000000246 RCX: 1ffffffff19d8eb9 [ 302.695863][ C2] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 302.695869][ C2] RBP: ffff88802247e5c0 R08: 0000000000000001 R09: 0000000000000001 [ 302.695875][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 302.695881][ C2] R13: ffff88806c6c0770 R14: ffff88802247e5c0 R15: 000000000000000b [ 302.695903][ C2] force_sig_info_to_task+0x2ce/0x3a0 [ 302.719072][ T9042] active_anon:3903 inactive_anon:119609 isolated_anon:0 [ 302.719072][ T9042] active_file:44 inactive_file:149 isolated_file:32 [ 302.719072][ T9042] unevictable:0 dirty:133 writeback:35 [ 302.719072][ T9042] slab_reclaimable:12812 slab_unreclaimable:128078 [ 302.719072][ T9042] mapped:34846 shmem:610 pagetables:1148 bounce:0 [ 302.719072][ T9042] free:6737 free_pcp:976 free_cma:0 [ 302.734103][ C2] force_sig_fault+0xb0/0xf0 [ 302.734118][ C2] ? force_sig_fault_to_task+0xe0/0xe0 [ 302.734128][ C2] ? pgtable_bad+0x90/0x90 [ 302.734140][ C2] ? _down_write_nest_lock+0x150/0x150 [ 302.734152][ C2] __bad_area_nosemaphore+0x2f3/0x400 [ 302.734165][ C2] do_user_addr_fault+0x7d7/0xb40 [ 302.734181][ C2] exc_page_fault+0x9e/0x180 [ 302.734195][ C2] ? asm_exc_page_fault+0x8/0x30 [ 302.753281][ T9042] Node 0 active_anon:15580kB inactive_anon:209164kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:12kB writeback:12kB shmem:1872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 94208kB writeback_tmp:0kB kernel_stack:8736kB all_unreclaimable? yes [ 302.771537][ C2] asm_exc_page_fault+0x1e/0x30 [ 302.771546][ C2] RIP: 0023:0x804d836 [ 302.771558][ C2] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b [ 302.771565][ C2] RSP: 002b:00000000f552b100 EFLAGS: 00010202 [ 302.771575][ C2] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f552b0f0 [ 302.771581][ C2] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000 [ 302.771586][ C2] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 302.771592][ C2] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 302.771598][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.771614][ C2] Kernel panic - not syncing: panic_on_warn set ... [ 302.771624][ C2] CPU: 2 PID: 11041 Comm: syz-executor.0 Not tainted 5.10.0-rc7-syzkaller #0 [ 302.771629][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 302.771632][ C2] Call Trace: [ 302.771638][ C2] [ 302.771656][ C2] dump_stack+0x107/0x163 [ 302.795159][ T9042] Node 1 active_anon:32kB inactive_anon:269272kB active_file:124kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:139372kB dirty:520kB writeback:128kB shmem:568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:1632kB all_unreclaimable? no [ 302.781434][ C2] panic+0x306/0x73d [ 302.781434][ C2] ? __warn_printk+0xf3/0xf3 [ 302.781434][ C2] ? __warn.cold+0x1a/0x44 [ 302.781434][ C2] ? __warn+0xf1/0x210 [ 302.781434][ C2] ? send_hsr_supervision_frame+0x889/0xb40 [ 302.781434][ C2] __warn.cold+0x35/0x44 [ 302.781434][ C2] ? send_hsr_supervision_frame+0x889/0xb40 [ 302.781434][ C2] report_bug+0x1bd/0x210 [ 302.781434][ C2] handle_bug+0x3c/0x60 [ 302.781434][ C2] exc_invalid_op+0x14/0x40 [ 302.781434][ C2] asm_exc_invalid_op+0x12/0x20 [ 302.781434][ C2] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 302.781434][ C2] Code: 04 31 ff 89 de e8 57 84 cd f8 84 db 0f 85 8b fd ff ff e8 3a 8c cd f8 48 c7 c7 60 e5 6b 8a c6 05 d1 2c 36 04 01 e8 e3 fa 09 00 <0f> 0b e9 6c fd ff ff e8 1b 8c cd f8 41 be 42 00 00 00 ba 01 00 00 [ 302.781434][ C2] RSP: 0000:ffffc90000520c70 EFLAGS: 00010286 [ 302.781434][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 302.781434][ C2] RDX: ffff88806c6c0000 RSI: ffffffff8158c835 RDI: fffff520000a4180 [ 302.781434][ C2] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc2747 [ 302.781434][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888012ad8980 [ 302.781434][ C2] R13: 0000000000000000 R14: ffff88804dbf4ce8 R15: 0000000000000000 [ 302.781434][ C2] ? vprintk_func+0x95/0x1e0 [ 302.781434][ C2] ? send_hsr_supervision_frame+0xb40/0xb40 [ 302.826970][ T9042] Node 0 [ 302.781434][ C2] hsr_announce+0x122/0x320 [ 302.781434][ C2] ? send_hsr_supervision_frame+0xb40/0xb40 [ 302.781434][ C2] call_timer_fn+0x1a5/0x6b0 [ 302.781434][ C2] ? add_timer_on+0x4a0/0x4a0 [ 302.781434][ C2] ? lock_downgrade+0x6d0/0x6d0 [ 302.781434][ C2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.781434][ C2] ? send_hsr_supervision_frame+0xb40/0xb40 [ 302.842823][ T9042] DMA free:2120kB min:732kB low:912kB high:1092kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:13076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.781434][ C2] __run_timers.part.0+0x67c/0xa50 [ 302.781434][ C2] ? call_timer_fn+0x6b0/0x6b0 [ 302.781434][ C2] ? sched_clock_cpu+0x17b/0x1f0 [ 302.781434][ C2] run_timer_softirq+0xb3/0x1d0 [ 302.781434][ C2] __do_softirq+0x2a0/0x9f6 [ 302.781434][ C2] asm_call_irq_on_stack+0xf/0x20 [ 302.781434][ C2] [ 302.781434][ C2] do_softirq_own_stack+0xaa/0xd0 [ 302.781434][ C2] irq_exit_rcu+0x132/0x200 [ 302.781434][ C2] sysvec_apic_timer_interrupt+0x4d/0x100 [ 302.781434][ C2] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 302.781434][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 [ 302.781434][ C2] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ca 3a 6e f8 48 89 ef e8 52 ef 6e f8 f6 c7 02 75 1a 53 9d 01 00 00 00 e8 61 5b 63 f8 65 8b 05 8a 05 1a 77 85 c0 74 0a 5b [ 302.781434][ C2] RSP: 0000:ffffc90009f4fd18 EFLAGS: 00000246 [ 302.781434][ C2] RAX: 0000000005672599 RBX: 0000000000000246 RCX: 1ffffffff19d8eb9 [ 302.781434][ C2] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 302.781434][ C2] RBP: ffff88802247e5c0 R08: 0000000000000001 R09: 0000000000000001 [ 302.781434][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 302.781434][ C2] R13: ffff88806c6c0770 R14: ffff88802247e5c0 R15: 000000000000000b [ 302.781434][ C2] force_sig_info_to_task+0x2ce/0x3a0 [ 302.781434][ C2] force_sig_fault+0xb0/0xf0 [ 302.781434][ C2] ? force_sig_fault_to_task+0xe0/0xe0 [ 302.781434][ C2] ? pgtable_bad+0x90/0x90 [ 302.891171][ T9042] lowmem_reserve[]: [ 302.781434][ C2] ? _down_write_nest_lock+0x150/0x150 [ 302.901697][ T9042] 0 [ 302.781434][ C2] __bad_area_nosemaphore+0x2f3/0x400 [ 302.781434][ C2] do_user_addr_fault+0x7d7/0xb40 [ 302.781434][ C2] exc_page_fault+0x9e/0x180 [ 302.781434][ C2] ? asm_exc_page_fault+0x8/0x30 [ 302.781434][ C2] asm_exc_page_fault+0x1e/0x30 [ 302.781434][ C2] RIP: 0023:0x804d836 [ 302.781434][ C2] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b [ 302.781434][ C2] RSP: 002b:00000000f552b100 EFLAGS: 00010202 [ 302.781434][ C2] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f552b0f0 [ 302.781434][ C2] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000 [ 302.781434][ C2] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 302.781434][ C2] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 302.781434][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.781434][ C2] Kernel Offset: disabled [ 302.781434][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:05:21 Registers: info registers vcpu 0 RAX=ae03000200000121 RBX=ffff88802cc19460 RCX=ffffffff8127d518 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff8cec9778 RBP=0000000000000000 RSP=ffffc90000006f88 R8 =0000000000000000 R9 =ffffffff8cec977f R10=fffffbfff19d92ef R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8127d550 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd4d0a92c9 CR3=000000006d21c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002 XMM02=00000050000000000000000100000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ae03000200000121 RBX=ffff88802cd19460 RCX=ffffffff8127d518 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff8cec9778 RBP=0000000000000001 RSP=ffffc900004c8f68 R8 =0000000000000000 R9 =ffffffff8cec977f R10=fffffbfff19d92ef R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8127d550 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff4e056b919 CR3=00000000693d1000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=eca78d498359cd4a03e4447e5c67b720 XMM01=c87090d32100c61c7e2fc5481288a0a5 XMM02=0fa5bbb4934bf325b1790f784aea8bf3 XMM03=344a7dc27e0a4cb506831c2ef2f5396d XMM04=00000000ffffffff00000000000000b4 XMM05=00000000000000000000000000000034 XMM06=b68d0e33219973d4baef9652d9a98f6c XMM07=ec3b1972c4c0a9560000000000000000 XMM08=7b6266d5e8c5b8285cb91a7b226fe95c XMM09=1e35b3ff000000008feafa3eb3db68e4 XMM10=b5296ef3840aed1ab3cba93f24b0b57a XMM11=ff89372dcfae112a5ed1db09e030abc2 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=a54ff53a3c6ef372bb67ae856a09e667 XMM15=5be0cd191f83d9ab9b05688c510e527f info registers vcpu 2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff840e888c RDI=ffffffff8fad8ae0 RBP=ffffffff8fad8aa0 RSP=ffffc900005206f0 R8 =0000000000000000 R9 =ffffffff8cecaf8f R10=000000000000000a R11=626b73203a656f61 R12=0000000000000020 R13=fffffbfff1f5b1a7 R14=fffffbfff1f5b15e R15=dffffc0000000000 RIP=ffffffff840e88e0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ce00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000054 CR3=000000006d233000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=205b5d3231333734322e36333220205b XMM01=00000000000000000000000000000000 XMM02=00000000000001210000000000435455 XMM03=652073662d34545845205d3436323131 XMM04=545b5d3136373234382e34333220205b XMM05=3136373234382e34333220205b3e323c XMM06=6920746f6e20302070756f726720726f XMM07=00000000000000002000000000000020 XMM08=ffffff0000000000ff000000000000ff XMM09=00000000000000000000000000000000 XMM10=ffffff00000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=ae03000200000121 RBX=ffff88802cf19460 RCX=ffffffff8127d518 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff8cec9778 RBP=0000000000000003 RSP=ffffc90000578f68 R8 =0000000000000000 R9 =ffffffff8cec977f R10=fffffbfff19d92ef R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8127d550 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff4e0e577a0 ffffffff 00c00000 GS =0000 ffff88802cf00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000054 CR3=00000000693d1000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a0a29307830202c7d7d7d7d7d5d6872 XMM01=79730a3a33206d6172676f727020676e XMM02=303030303030663778302826202c3234 XMM03=78302874656e72656874655f74696d65 XMM04=5f7a79730a3a33206d6172676f727020 XMM05=79730a3a33206d6172676f727020676e XMM06=6f6c5f6b6e696c40202c5d666678305b XMM07=3d7974706d65407b3d29303432313030 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000