[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.645775][ T26] audit: type=1800 audit(1573098339.988:25): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.680865][ T26] audit: type=1800 audit(1573098339.988:26): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.717689][ T26] audit: type=1800 audit(1573098339.998:27): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2019/11/07 03:45:50 fuzzer started 2019/11/07 03:45:52 dialing manager at 10.128.0.26:41415 2019/11/07 03:45:52 syscalls: 2566 2019/11/07 03:45:52 code coverage: enabled 2019/11/07 03:45:52 comparison tracing: enabled 2019/11/07 03:45:52 extra coverage: extra coverage is not supported by the kernel 2019/11/07 03:45:52 setuid sandbox: enabled 2019/11/07 03:45:52 namespace sandbox: enabled 2019/11/07 03:45:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/07 03:45:52 fault injection: enabled 2019/11/07 03:45:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/07 03:45:52 net packet injection: enabled 2019/11/07 03:45:52 net device setup: enabled 2019/11/07 03:45:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/07 03:45:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:48:41 executing program 0: 03:48:41 executing program 1: syzkaller login: [ 237.881038][ T8809] IPVS: ftp: loaded support on port[0] = 21 [ 238.060093][ T8809] chnl_net:caif_netlink_parms(): no params data found [ 238.080058][ T8812] IPVS: ftp: loaded support on port[0] = 21 03:48:41 executing program 2: [ 238.148517][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.156332][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.164444][ T8809] device bridge_slave_0 entered promiscuous mode [ 238.184037][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.192237][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.200383][ T8809] device bridge_slave_1 entered promiscuous mode [ 238.278402][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.330150][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.368006][ T8809] team0: Port device team_slave_0 added [ 238.384046][ T8815] IPVS: ftp: loaded support on port[0] = 21 [ 238.393788][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 238.407607][ T8809] team0: Port device team_slave_1 added 03:48:41 executing program 3: [ 238.514013][ T8809] device hsr_slave_0 entered promiscuous mode [ 238.552380][ T8809] device hsr_slave_1 entered promiscuous mode [ 238.626451][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.634802][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.663894][ T8812] device bridge_slave_0 entered promiscuous mode [ 238.698573][ T8818] IPVS: ftp: loaded support on port[0] = 21 [ 238.699597][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.732432][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.764720][ T8812] device bridge_slave_1 entered promiscuous mode [ 238.994714][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.002146][ T8809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.010088][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.017285][ T8809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.104041][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 03:48:42 executing program 4: [ 239.166882][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.191520][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.222507][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.278206][ T8815] chnl_net:caif_netlink_parms(): no params data found [ 239.353221][ T8812] team0: Port device team_slave_0 added [ 239.494249][ T8812] team0: Port device team_slave_1 added [ 239.546485][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.561073][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.569139][ T8815] device bridge_slave_0 entered promiscuous mode [ 239.638713][ T8845] IPVS: ftp: loaded support on port[0] = 21 [ 239.692404][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.699395][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.711088][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.719147][ T8815] device bridge_slave_1 entered promiscuous mode [ 239.867525][ T8812] device hsr_slave_0 entered promiscuous mode 03:48:43 executing program 5: [ 239.951268][ T8812] device hsr_slave_1 entered promiscuous mode [ 239.990935][ T8812] debugfs: Directory 'hsr0' with parent '/' already present! [ 240.048715][ T8815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.140341][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.162516][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.225219][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.240720][ T8815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.250668][ T8818] chnl_net:caif_netlink_parms(): no params data found [ 240.283832][ T8856] IPVS: ftp: loaded support on port[0] = 21 [ 240.325714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.355802][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.401556][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.408670][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.454441][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.475258][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.514396][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.521573][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.541183][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.630464][ T8815] team0: Port device team_slave_0 added [ 240.663273][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.723294][ T8815] team0: Port device team_slave_1 added [ 240.745600][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.775565][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.814978][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.842526][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.874809][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.914385][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.959229][ T8809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.996374][ T8809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.067622][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.096098][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.105011][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.165970][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.178339][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.219524][ T8818] device bridge_slave_0 entered promiscuous mode [ 241.257758][ T8815] device hsr_slave_0 entered promiscuous mode [ 241.301816][ T8815] device hsr_slave_1 entered promiscuous mode [ 241.361208][ T8815] debugfs: Directory 'hsr0' with parent '/' already present! [ 241.385888][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.393492][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.407049][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.417520][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.431915][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.439970][ T8818] device bridge_slave_1 entered promiscuous mode [ 241.470266][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.566951][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.574392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.585679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.627489][ T8818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.691465][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.705265][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.774011][ T2875] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.781176][ T2875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.824427][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.853775][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.871379][ T2875] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.878489][ T2875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.922330][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.957141][ T8818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.988167][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 242.055210][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.086422][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.133269][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.156147][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:48:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x207, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x148) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 242.229411][ T8812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.263074][ T8812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.321448][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.362510][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.396620][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.438604][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.464064][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.502255][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.522476][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.533370][ T8818] team0: Port device team_slave_0 added 03:48:45 executing program 0: [ 242.596064][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.632049][ T8818] team0: Port device team_slave_1 added 03:48:46 executing program 0: 03:48:46 executing program 0: [ 242.769379][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.797258][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.810574][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 03:48:46 executing program 0: [ 242.884510][ T8818] device hsr_slave_0 entered promiscuous mode 03:48:46 executing program 0: [ 242.946114][ T8818] device hsr_slave_1 entered promiscuous mode 03:48:46 executing program 0: [ 242.990952][ T8818] debugfs: Directory 'hsr0' with parent '/' already present! [ 242.998645][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.011038][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.039444][ T8845] device bridge_slave_0 entered promiscuous mode [ 243.064194][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.091768][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.098942][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.108768][ T8845] device bridge_slave_1 entered promiscuous mode [ 243.181675][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.189536][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.259470][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 243.313665][ T8815] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.327367][ T8845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.363787][ T8845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.451911][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.460638][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 03:48:46 executing program 1: [ 243.503511][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.510617][ T8895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.643322][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.666812][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.707466][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.719357][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.726566][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.827176][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.857058][ T8845] team0: Port device team_slave_0 added [ 243.883542][ T8845] team0: Port device team_slave_1 added [ 243.973525][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.982745][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.011698][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.020320][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.060295][ T8815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.090923][ T8815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.147869][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.176365][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.185660][ T8856] device bridge_slave_0 entered promiscuous mode [ 244.223494][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.249031][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.281718][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.290231][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.331845][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.340337][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.354074][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.366668][ T8818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.413440][ T8845] device hsr_slave_0 entered promiscuous mode [ 244.441384][ T8845] device hsr_slave_1 entered promiscuous mode [ 244.481088][ T8845] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.488861][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.496151][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.504512][ T8856] device bridge_slave_1 entered promiscuous mode [ 244.542774][ T8818] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.566698][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.575518][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.584005][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.592137][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.617939][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.652568][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.691326][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.719049][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.726266][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.771313][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.780097][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.838957][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.846144][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.891922][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.915174][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.939268][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.012512][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.027429][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.067703][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.077793][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.124190][ T8856] team0: Port device team_slave_0 added [ 245.155693][ T8818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.210804][ T8818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.253581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.275850][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.327778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.387584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.396792][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.435932][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.462784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.499594][ T8856] team0: Port device team_slave_1 added [ 245.537495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.619167][ T8818] 8021q: adding VLAN 0 to HW filter on device batadv0 03:48:49 executing program 2: [ 245.666714][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.687211][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.765641][ T8856] device hsr_slave_0 entered promiscuous mode [ 245.812133][ T8856] device hsr_slave_1 entered promiscuous mode [ 245.851453][ T8856] debugfs: Directory 'hsr0' with parent '/' already present! [ 245.863653][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.895801][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.906183][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.918411][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.957697][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.976509][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.996775][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.003948][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.064819][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.079301][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.140589][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.177233][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state 03:48:49 executing program 3: [ 246.184409][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.205938][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.296440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.318357][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.379054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.417752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.459627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.524862][ T8845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.564334][ T8845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.605510][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.618168][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.662530][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.697258][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.722502][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.790590][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.805514][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.817125][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.828006][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.844478][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.869016][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.928529][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.939558][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.982325][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.007779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.030189][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.037375][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.078627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.103820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.127517][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.134692][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.155289][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.169302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.198896][ T8856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.219015][ T8856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.238447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.246507][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.255462][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.267439][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.276421][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.285112][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.293682][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.302585][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.310993][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.319574][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.328098][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 03:48:50 executing program 1: [ 247.354996][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.365414][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.373372][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 03:48:50 executing program 5: 03:48:50 executing program 4: 03:48:50 executing program 3: 03:48:50 executing program 2: 03:48:50 executing program 0: 03:48:50 executing program 1: 03:48:50 executing program 2: 03:48:50 executing program 3: 03:48:50 executing program 4: 03:48:51 executing program 1: 03:48:51 executing program 0: 03:48:51 executing program 5: 03:48:51 executing program 4: 03:48:51 executing program 2: 03:48:51 executing program 3: 03:48:51 executing program 1: 03:48:51 executing program 0: 03:48:51 executing program 5: 03:48:51 executing program 4: 03:48:51 executing program 3: 03:48:51 executing program 2: 03:48:51 executing program 1: 03:48:51 executing program 0: 03:48:51 executing program 5: 03:48:51 executing program 4: 03:48:51 executing program 0: 03:48:51 executing program 1: 03:48:51 executing program 3: 03:48:51 executing program 2: 03:48:51 executing program 4: 03:48:51 executing program 5: 03:48:51 executing program 1: 03:48:51 executing program 3: 03:48:51 executing program 2: 03:48:51 executing program 0: 03:48:51 executing program 5: 03:48:51 executing program 1: 03:48:52 executing program 4: 03:48:52 executing program 0: 03:48:52 executing program 5: 03:48:52 executing program 3: 03:48:52 executing program 1: 03:48:52 executing program 2: 03:48:52 executing program 4: 03:48:52 executing program 3: 03:48:52 executing program 5: 03:48:52 executing program 0: 03:48:52 executing program 1: 03:48:52 executing program 2: 03:48:52 executing program 5: 03:48:52 executing program 4: 03:48:52 executing program 3: 03:48:52 executing program 0: 03:48:52 executing program 1: 03:48:52 executing program 2: 03:48:52 executing program 5: 03:48:52 executing program 4: 03:48:52 executing program 0: 03:48:52 executing program 3: 03:48:52 executing program 1: 03:48:52 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 03:48:52 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1, 0x9f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x80100, 0x218) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socket(0x10, 0x2, 0x0) lstat(0x0, &(0x7f0000000340)) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 03:48:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$eventfd(r1, &(0x7f00000001c0), 0xffffff7f) open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002200), 0x1000) chown(&(0x7f0000000080)='./bus\x00', 0x0, 0xee00) creat(&(0x7f0000000000)='./bus\x00', 0x0) 03:48:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.origin\x00', &(0x7f0000000100)=""/5, 0x5) 03:48:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) [ 249.800919][ C1] hrtimer: interrupt took 28738 ns [ 249.875489][ T9188] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.034173][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 250.034187][ T26] audit: type=1804 audit(1573098533.378:31): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir053445536/syzkaller.TYaiKB/11/bus" dev="sda1" ino=16567 res=1 [ 250.117697][ T9194] IPVS: ftp: loaded support on port[0] = 21 03:48:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x5, 0x14880) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r5) process_vm_writev(r5, &(0x7f0000000bc0)=[{&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000340)=""/27, 0x26d}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00), 0x0, 0x0) prlimit64(r5, 0x0, &(0x7f0000000040)={0xe00000000, 0x2}, &(0x7f0000000080)) sendto(r3, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) 03:48:53 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r1) ioprio_set$uid(0x3, r1, 0x9) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x9, 0x8040) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000240)=0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) open(0x0, 0x0, 0x0) ftruncate(r4, 0x200003) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000000c0)='veth1\x00') setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040)='overlay\x00', 0x9048, &(0x7f0000000340)={[{@nfs_export_off='nfs_export=off'}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@defcontext={'defcontext', 0x3d, 'root\xd8\x04\xe9\x10\x14z\xc8\xb5\xa8~@\x1f\x8fi\x1c#pHK\x8a4\x8b\tWB\x945f~\xb0J\xc2\xca\xd4\xc6\xf4\xbf\xd5\xf4\xe2\xe5/p\x1c+\x1b\xb2p\xd9l\xf5\x94.\xac\x8d\x15\"\xb7\xf7RH\xf6\x9d\xe1\x9d%\x91\xea\n\xef\xf0\x8c\xd6\xeb\x91E\xd3\xc8\xac (/\xb1\xaaj\x06'}}]}) openat$cgroup_ro(r6, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x3c40c1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) [ 250.493418][ T9197] IPVS: ftp: loaded support on port[0] = 21 [ 250.548440][ T26] audit: type=1804 audit(1573098533.888:32): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir219661595/syzkaller.TE2Boi/14/bus" dev="sda1" ino=16579 res=1 03:48:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r2, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000000)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = dup2(r5, r4) close(r6) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000036c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="85100000fffffffe85100000feffffff18250000", @ANYRES32=r7, @ANYBLOB="00000000ab0d00000085100000feff000000000000000200008028c974020000001d21f4ff00000000"], &(0x7f0000000080)='GPL\x00\x8d\at\xce\xb0\xac\xe42\x0f\xd3\x86\x92\xcd\xc9\x82SO \x8b(\x0eB\xca\x940\xb19\xd4\x17;WK\x87y\x91L\xb2\xaaR\xdb\xeaqm&\xc9Zl\xa4\x16\xdf\x9d\xeao$\x84\xc66\xe1\xd3\xf6\xeca\xc0&uCY\x9c#\xe7\x16=]\x91Q\x8d\xe4\x8e\xf9]0\x11\xfa\xb6\xdd\x9a\x9c \xda\x17\x84l\xf6\xdd\x18H-^y\xd3ke\x81\xa4-Kp\xd1\xa9/l\x10R\xdaS\xcb\x0f\\\vs,\xa8\x88H\x1c\x85\x93\xfc\xf0\t\x95\xb4\xf9%\xf3\x1f+\xc9\x13\xe2\xfb', 0x4, 0xfffffd3c, &(0x7f0000000180)=""/153, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 250.713452][ T26] audit: type=1804 audit(1573098533.918:33): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219661595/syzkaller.TE2Boi/14/bus" dev="sda1" ino=16579 res=1 [ 250.854655][ T26] audit: type=1804 audit(1573098533.918:34): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219661595/syzkaller.TE2Boi/14/bus" dev="sda1" ino=16579 res=1 03:48:54 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000036c0), 0x12) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = dup2(r3, r2) close(r4) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000000)={0x1ff, "30be8451e525e961e1cfdee9255e5a503770f80886a8458783f4558252f131f4", 0x1}) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900010000000000000000f5fe010000000000000000000000000001e000000100000000000000000000000000000000000000000a00002c0eb765f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a00000000a4f8bc305e469ac000000000000000000000000000000000ae9f92c8e7ac86b40000000000000000000000000000000000000000000c001f000800088210ed573dadc896118e41f9c704c135445ab0af4fa4fa0300dc553fa76ab1c6ba578113e29467f5d2b10d68cac82cf86aa009a797cecb8f6c0f3041bbbaa5df66b0f9f33268eed561c099d271c81171c1435ee403065c98074e182389a8c436c2f36afc0900000039f395a9b7f316780c00"/245], 0xc4}}, 0x0) [ 250.956839][ T26] audit: type=1804 audit(1573098533.958:35): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir219661595/syzkaller.TE2Boi/14/bus" dev="sda1" ino=16579 res=1 03:48:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r3, r2) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ftruncate(r4, 0x200006) sendfile(r2, r4, 0x0, 0x8000fffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x0, 0x6}, 'port1\x00', 0x8, 0x420, 0x7, 0x67, 0x3c, 0x2462, 0x9}) request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='system.posix_acl_access\x00', 0xfffffffffffffffc) [ 251.037807][ T9235] netlink: 'syz-executor.5': attribute type 31 has an invalid length. [ 251.042977][ T26] audit: type=1804 audit(1573098533.978:36): pid=9216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir053445536/syzkaller.TYaiKB/11/bus" dev="sda1" ino=16567 res=1 03:48:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="cc0000002400070500000015e4d1929c38025c00", @ANYRES32=r1, @ANYBLOB="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"], 0xcc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r8, r7) r9 = dup3(r8, r0, 0x80000) write$P9_RLERRORu(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000070400030000000000000000"], 0x10) keyctl$chown(0x4, r4, r5, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x3, &(0x7f0000000180)=[r3, r6, r10]) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 03:48:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001d80)={'syz', 0x1, 0x2e}, r3) 03:48:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000001c0)={{}, 'port0\x00', 0x0, 0x0, 0x4, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000380)=0x10, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='IPVS\x00') ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/39) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) pipe(0x0) getgid() write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40c02, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='veth0_to_bond\x00', 0x6f15, 0x400, 0xfff9}) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000036c0), 0x12) r3 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r4) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r5, r6, r7) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40040, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6fb1653d30303030305d342d6fb1d45fbf303030303132303030302c757365725f69643d5357b2664e158b58a9b281dd8e26f0fd2e9f8b74942689802531773496346b8aadac9edac23f1adda470f6c7ded5552adee54794e0e9bd0d89408342a3ae2715b9aa06c22f886ac86522e811cabfdf68aa736d88890c498d1abfd88ccd4e39df1ce42caa4387e7c986a377bb", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',allow_other,default_permissions,max_read=0x000000007fffffff,blksize=0x0000000000000800,default_permissions,max_read=0x00000000000003ff,allow_other,default_permissions,max_read=0x0000000000000006,smackfstransmute=user%-.,dont_hash,fowner=', @ANYRESDEC=r8, @ANYBLOB=',subj_role=bbr\x00,\x00']) [ 251.220097][ T9246] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x4c00, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b4009000400060082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r3, r2) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r4, 0x200006) sendfile(r2, r4, 0x0, 0x8000fffffffe) mlockall(0x1) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = dup2(r5, r1) close(r6) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000440)=r8) process_vm_writev(r8, &(0x7f0000000bc0)=[{&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/128, 0x80}], 0x2, 0x0) fcntl$lock(r6, 0x5fce7a1d2b45fb3e, &(0x7f00000000c0)={0x0, 0x3, 0x101, 0x9, r8}) [ 251.265625][ T9246] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.323054][ T9259] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 251.349628][ T9261] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:54 executing program 1: unshare(0xc000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) setns(r0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)="82fa383b332920cd28cd31823fc003e0970574ed81ee0cb2ef28cdc8e34d7d80a0bbcbb6368de3fb0f0d2112dfb3489aa75fb60153c1cb11809bd519b9333d1ea334fcd4d2f195ffdd5d3da145e03ccb31fa5e6a8f3ba27c1cc04872e7b1249adaaa48f19aaa1d47fbb27fcfc918cc4776cba6aa592cb90025170c8579062311fa25245f9c9b128c40a05455689e81f0b8c4df4be655e2d42ea31c3b9c1ca8fd62eef8151233c02347324544b03fde46351280fd9216e97e4ad323eb48f30a58fb423110f066d48965db7eddf31b7ef7236687ae54a13c091fe0eaee90bcae284d6732e1") getpgrp(0xffffffffffffffff) [ 251.378109][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.406983][ T9259] ucma_write: process 24 (syz-executor.5) changed security contexts after opening file descriptor, this is not allowed. 03:48:54 executing program 4: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@integrity='integrity'}]}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r1, r0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200006) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001500)='/dev/mixer\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/247, 0xf7}], 0x8) [ 251.931429][ T26] audit: type=1800 audit(1573098535.278:37): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16584 res=0 [ 252.165388][ T9259] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:48:57 executing program 3: r0 = memfd_create(&(0x7f0000000080)='dev ', 0x3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40000, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000036c0), 0x12) write$FUSE_LSEEK(r2, &(0x7f0000000040)={0xffffff8d, 0x0, 0x2, {0x2}}, 0x18) fcntl$addseals(r0, 0x409, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r3, 0x46f46dbc4dfe4468, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x1f15d7c84fda8851}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffff0a}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 03:48:57 executing program 1: unshare(0xc000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) setns(r0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)="82fa383b332920cd28cd31823fc003e0970574ed81ee0cb2ef28cdc8e34d7d80a0bbcbb6368de3fb0f0d2112dfb3489aa75fb60153c1cb11809bd519b9333d1ea334fcd4d2f195ffdd5d3da145e03ccb31fa5e6a8f3ba27c1cc04872e7b1249adaaa48f19aaa1d47fbb27fcfc918cc4776cba6aa592cb90025170c8579062311fa25245f9c9b128c40a05455689e81f0b8c4df4be655e2d42ea31c3b9c1ca8fd62eef8151233c02347324544b03fde46351280fd9216e97e4ad323eb48f30a58fb423110f066d48965db7eddf31b7ef7236687ae54a13c091fe0eaee90bcae284d6732e1") getpgrp(0xffffffffffffffff) 03:48:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000001c0)={{}, 'port0\x00', 0x0, 0x0, 0x4, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000380)=0x10, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='IPVS\x00') ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/39) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) pipe(0x0) getgid() write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40c02, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='veth0_to_bond\x00', 0x6f15, 0x400, 0xfff9}) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000036c0), 0x12) r3 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r4) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r5, r6, r7) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40040, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6fb1653d30303030305d342d6fb1d45fbf303030303132303030302c757365725f69643d5357b2664e158b58a9b281dd8e26f0fd2e9f8b74942689802531773496346b8aadac9edac23f1adda470f6c7ded5552adee54794e0e9bd0d89408342a3ae2715b9aa06c22f886ac86522e811cabfdf68aa736d88890c498d1abfd88ccd4e39df1ce42caa4387e7c986a377bb", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',allow_other,default_permissions,max_read=0x000000007fffffff,blksize=0x0000000000000800,default_permissions,max_read=0x00000000000003ff,allow_other,default_permissions,max_read=0x0000000000000006,smackfstransmute=user%-.,dont_hash,fowner=', @ANYRESDEC=r8, @ANYBLOB=',subj_role=bbr\x00,\x00']) 03:48:57 executing program 4: unshare(0xc000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) setns(r0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)="82fa383b332920cd28cd31823fc003e0970574ed81ee0cb2ef28cdc8e34d7d80a0bbcbb6368de3fb0f0d2112dfb3489aa75fb60153c1cb11809bd519b9333d1ea334fcd4d2f195ffdd5d3da145e03ccb31fa5e6a8f3ba27c1cc04872e7b1249adaaa48f19aaa1d47fbb27fcfc918cc4776cba6aa592cb90025170c8579062311fa25245f9c9b128c40a05455689e81f0b8c4df4be655e2d42ea31c3b9c1ca8fd62eef8151233c02347324544b03fde46351280fd9216e97e4ad323eb48f30a58fb423110f066d48965db7eddf31b7ef7236687ae54a13c091fe0eaee90bcae284d6732e1") getpgrp(0xffffffffffffffff) 03:48:57 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x3) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'u\x00'}, 0x7) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000100)={0xfffffffffffffff1, 0x17, 0x2, {0xd, './file0/file0'}}, 0x16) close(r0) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 03:48:57 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000140)='\x06\x00\x00\x00\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000036c0), 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r2, 0x0, 0x7}, 0x10) [ 254.156698][ T9300] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:48:57 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000140)='\x06\x00\x00\x00\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000036c0), 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r2, 0x0, 0x7}, 0x10) 03:48:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000065000066010000000000009500000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r1, r0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200006) sendfile(r0, r2, 0x0, 0x8000fffffffe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @broadcast}], 0x10) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) 03:48:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001300), 0x13}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35b08ff338832ca84b13a719c053724c5666747ea7723ef96ff4508ed4fcff49b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 03:48:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$inet(0x2, 0x3, 0x7) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 03:48:57 executing program 3: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@local, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) r1 = syz_open_procfs(0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 254.400282][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.418561][ T9324] device bridge_slave_0 left promiscuous mode [ 254.425452][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state 03:48:57 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000140)='\x06\x00\x00\x00\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000036c0), 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r2, 0x0, 0x7}, 0x10) [ 254.547523][ T26] audit: type=1800 audit(1573098537.888:38): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16597 res=0 [ 254.620836][ T9324] team0: Device bridge_slave_0 is up. Set it down before adding it as a team port [ 254.638145][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.648414][ T9324] team0: Device bridge_slave_0 is up. Set it down before adding it as a team port 03:48:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e23578134662c300b2c00052a008701546fabca1b4e7d06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 03:48:58 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x4008140, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0xfffffffffffffd64) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0a6e0000b3b9d96b7b3f124ab8d3979618cea2dbfd6350fb33555c147773ee8cf6ab5a51ce7d10152435d95faaabcaa0c0cb5583ee432f92b1e21c75bd4e5520dbb4ae50bf451695bf09e9fa9816da58d9ea55ec6086782f4aae7c723e95dcef533ad968778b84827808b7491d8438b09c30874031faa28c8d02fadcaa2080d09737", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r8, 0x9}, &(0x7f0000000280)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0xa, &(0x7f00000002c0)=[{0x8000, 0x1, 0x1f, 0x7fff}, {0x0, 0xbb, 0x0, 0x4}, {0x9, 0x0, 0x7f, 0x7}, {0x400, 0x40, 0x7f, 0xd1}, {0xfff, 0x1, 0x6, 0x1}, {0x3, 0x1, 0x1, 0x5}, {0x1, 0x40, 0x0, 0xf8}, {0x7, 0x7, 0x7, 0x1}, {0x3, 0x3, 0x8, 0xffffffff}, {0x5, 0x7, 0x2, 0x2}]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r8}, &(0x7f0000000080)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setlease(r0, 0x400, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000036c0), 0x12) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r12, r11) poll(&(0x7f0000000400), 0x2000000000000032, 0x3) fcntl$setlease(r9, 0x400, 0x2) [ 254.806922][ T9333] skbuff: skb_over_panic: text:000000003a8f7b7a len:264 put:72 head:000000009454f23c data:000000009454f23c tail:0x108 end:0xc0 dev: [ 254.901374][ T9333] ------------[ cut here ]------------ [ 254.906925][ T9333] kernel BUG at net/core/skbuff.c:108! [ 254.915659][ T9333] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 254.921764][ T9333] CPU: 1 PID: 9333 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 254.929566][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.939718][ T9333] RIP: 0010:skb_panic+0x176/0x178 [ 254.944754][ T9333] Code: 53 09 fc 4c 8b 4d b8 8b 4b 70 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 60 39 47 88 ff 75 c8 ff 75 c0 e8 82 7f b7 fb <0f> 0b e8 27 f1 cd fb 4c 8b 6d 08 e8 fe 49 09 fc 48 c7 c1 00 46 47 [ 254.964353][ T9333] RSP: 0018:ffff888058666d58 EFLAGS: 00010282 [ 254.970413][ T9333] RAX: 0000000000000087 RBX: ffff8880a4d43640 RCX: 0000000000000000 [ 254.978383][ T9333] RDX: 0000000000000000 RSI: ffffffff815cc5a6 RDI: ffffed100b0ccd9d [ 254.986341][ T9333] RBP: ffff888058666dc0 R08: 0000000000000087 R09: ffffed1015d26159 [ 254.994304][ T9333] R10: ffffed1015d26158 R11: ffff8880ae930ac7 R12: ffffffff88474640 [ 255.002269][ T9333] R13: ffffffff866a1abe R14: 0000000000000048 R15: ffffffff88473920 [ 255.010237][ T9333] FS: 00007f9c29b27700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 255.019188][ T9333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.025762][ T9333] CR2: 00007ffdba41abe0 CR3: 00000000a2c82000 CR4: 00000000001406e0 [ 255.033717][ T9333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.041668][ T9333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.049634][ T9333] Call Trace: [ 255.052985][ T9333] ? pfkey_send_acquire+0x12be/0x2620 [ 255.058344][ T9333] skb_put.cold+0x23/0x23 [ 255.062659][ T9333] pfkey_send_acquire+0x12be/0x2620 [ 255.067892][ T9333] km_query+0xcb/0x210 [ 255.071944][ T9333] xfrm_state_find+0x2d15/0x5040 [ 255.076884][ T9333] ? xfrm_alloc_spi+0x990/0x990 [ 255.081721][ T9333] ? lockdep_hardirqs_on+0x421/0x5e0 [ 255.087041][ T9333] ? retint_kernel+0x2b/0x2b [ 255.091629][ T9333] ? find_held_lock+0x35/0x130 [ 255.096405][ T9333] ? ip6_pol_route+0x2c2/0xaf0 [ 255.101155][ T9333] xfrm_tmpl_resolve+0x32a/0xc90 [ 255.106086][ T9333] ? xfrm_tmpl_resolve+0x32a/0xc90 [ 255.111187][ T9333] ? __xfrm_dst_lookup+0x150/0x150 [ 255.116281][ T9333] ? ip6_pol_route_lookup+0x1240/0x1240 [ 255.121829][ T9333] ? __this_cpu_preempt_check+0x3a/0x210 [ 255.127445][ T9333] ? __kasan_check_read+0x11/0x20 [ 255.132475][ T9333] ? mark_lock+0xc2/0x1220 [ 255.136880][ T9333] xfrm_resolve_and_create_bundle+0x137/0x2680 [ 255.143018][ T9333] ? __kasan_check_read+0x11/0x20 [ 255.148148][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.153595][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.159048][ T9333] ? lockdep_hardirqs_on+0x421/0x5e0 [ 255.164325][ T9333] ? retint_kernel+0x2b/0x2b [ 255.168938][ T9333] ? xfrm_sk_policy_lookup+0x3c7/0x510 [ 255.174393][ T9333] ? __xfrm_decode_session+0x2e90/0x2e90 [ 255.180030][ T9333] ? __this_cpu_preempt_check+0x3a/0x210 [ 255.185654][ T9333] ? lock_downgrade+0x920/0x920 [ 255.190487][ T9333] ? xfrm_sk_policy_lookup+0x466/0x510 [ 255.195928][ T9333] ? xfrm_sk_policy_lookup+0x3ee/0x510 [ 255.201388][ T9333] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 255.207102][ T9333] xfrm_lookup_with_ifid+0x278/0x1fc0 [ 255.212456][ T9333] ? xfrm_lookup_with_ifid+0x278/0x1fc0 [ 255.217979][ T9333] ? __local_bh_enable_ip+0x15a/0x270 [ 255.223329][ T9333] ? audit_trim_trees+0x35a/0x600 [ 255.228340][ T9333] ? xfrm_policy_lookup+0x90/0x90 [ 255.233409][ T9333] ? ip6_frag_next+0xb20/0xb20 [ 255.238155][ T9333] ? retint_kernel+0x2b/0x2b [ 255.242731][ T9333] xfrm_lookup_route+0x3b/0x1f0 [ 255.247562][ T9333] ip6_dst_lookup_flow+0x189/0x220 [ 255.252652][ T9333] ? lock_downgrade+0x920/0x920 [ 255.257494][ T9333] ? ip6_dst_lookup+0x70/0x70 [ 255.262155][ T9333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.268377][ T9333] ? __kasan_check_read+0x11/0x20 [ 255.273421][ T9333] rawv6_sendmsg+0xb40/0x36e0 [ 255.278079][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.283520][ T9333] ? rawv6_bind+0x9a0/0x9a0 [ 255.288004][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.293455][ T9333] ? lockdep_hardirqs_on+0x421/0x5e0 [ 255.298723][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.304164][ T9333] ? __this_cpu_preempt_check+0x3a/0x210 [ 255.309789][ T9333] ? retint_kernel+0x2b/0x2b [ 255.314361][ T9333] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 255.320589][ T9333] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 255.326150][ T9333] inet_sendmsg+0x9e/0xe0 [ 255.330459][ T9333] ? inet_sendmsg+0x9e/0xe0 [ 255.334952][ T9333] ? inet_send_prepare+0x4f0/0x4f0 [ 255.340084][ T9333] sock_sendmsg+0xd7/0x130 [ 255.344481][ T9333] ___sys_sendmsg+0x3e2/0x920 [ 255.349140][ T9333] ? copy_msghdr_from_user+0x440/0x440 [ 255.354592][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.360032][ T9333] ? lockdep_hardirqs_on+0x421/0x5e0 [ 255.365304][ T9333] ? retint_kernel+0x2b/0x2b [ 255.369888][ T9333] ? trace_hardirqs_on_caller+0x6a/0x240 [ 255.375500][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.380941][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.386379][ T9333] ? __might_fault+0x12b/0x1e0 [ 255.391121][ T9333] ? find_held_lock+0x35/0x130 [ 255.395877][ T9333] ? __might_fault+0x12b/0x1e0 [ 255.400621][ T9333] ? lock_downgrade+0x920/0x920 [ 255.405450][ T9333] ? lock_acquire+0x20b/0x410 [ 255.410110][ T9333] ? ___might_sleep+0x163/0x2c0 [ 255.414945][ T9333] __sys_sendmmsg+0x1bf/0x4d0 [ 255.419605][ T9333] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 255.424614][ T9333] ? _copy_to_user+0x118/0x160 [ 255.429360][ T9333] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 255.435583][ T9333] ? put_timespec64+0xda/0x140 [ 255.440331][ T9333] ? nsecs_to_jiffies+0x30/0x30 [ 255.445167][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.450606][ T9333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 255.456043][ T9333] ? do_syscall_64+0x26/0x760 [ 255.460702][ T9333] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.466750][ T9333] ? do_syscall_64+0x26/0x760 [ 255.471424][ T9333] __x64_sys_sendmmsg+0x9d/0x100 [ 255.476355][ T9333] do_syscall_64+0xfa/0x760 [ 255.480843][ T9333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.486740][ T9333] RIP: 0033:0x45a219 [ 255.490638][ T9333] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.510234][ T9333] RSP: 002b:00007f9c29b26c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.518633][ T9333] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 255.526591][ T9333] RDX: 0400000000000058 RSI: 0000000020007e00 RDI: 0000000000000005 [ 255.534547][ T9333] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 255.542500][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c29b276d4 03:48:58 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x3, 0x0) write(r0, &(0x7f0000000040)="4cea", 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:48:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x47, 0x840480) recvfrom$inet(r1, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0x4c) r2 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580), 0x0) rmdir(&(0x7f0000000700)='./file1\x00') stat(&(0x7f0000000500)='./file1\x00', 0x0) r3 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r3, 0xd, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000380)="31dca50d5e0bc5a843be0c") getsockopt$sock_cred(r4, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) accept(r4, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r5, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4003011, r6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0x9a) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000840)=0x0) getpgid(r7) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x400, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8a80, 0xc1f}, 0x0, 0xffffffffffffffff, r2, 0x0) r9 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xe7}], 0x1, r9) io_setup(0xfe, &(0x7f0000000200)) memfd_create(&(0x7f0000000900)='\x00\x05\xdb\x1f]\x0f>\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\xe9\xe7\xac\"\xed\x96F\xec\xdcd\xcan6\x1d\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89', 0x3) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000280)=0x28001, 0x0) socket$inet(0x2, 0xa, 0x3) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000640)) sendto$inet(0xffffffffffffffff, 0x0, 0x3aa, 0x4000000, 0x0, 0xfea3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="000000a500", 0x10) 03:48:58 executing program 1: syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000100)=0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x1fb) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x102, 0x8000003}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd0028080}, 0x228, &(0x7f0000000540)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x30bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0x25d, 0x8, 0x2}]}, 0xfffffffffffffd4e}, 0x1, 0x0, 0x0, 0x40}, 0x24044885) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r9 = dup2(0xffffffffffffffff, r8) r10 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) dup2(r9, r10) r11 = dup(r3) open(&(0x7f0000000400)='./file0\x00', 0x200000, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1032}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="10002dbd7000ffdbdf250200000024000700080001", @ANYRES32=r7, @ANYBLOB="080088052b0fcecc00240979ad61145f14392b8ac4e74387b6e12f9bc27a85ef460a9fe818c8a18bb8b71a79b4c51479447d64210d86fb415ddd8da0ff53ce9aca44f2a3ebe21c7584be891c117ffebf722e5d7c65196e0d125471b5cc7bbf00"/108, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYBLOB="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", @ANYBLOB="0c000200000000000000000008000100000000000c00080006000000000000000c0004000000000000000000"], 0xb}}, 0x4000000) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000426bd7000ffdbdf25050000000c000300010000020000452e0800000c00030004000000595c7ec798f3000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x68bfa0df19c7b291}, 0x40000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf25010000000c00080005000000000000000c000400050000000000000008000100000000000c0008040400000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040818}, 0x8000) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) r14 = getpgrp(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x4, 0xee01, r0, r13, 0x0, 0x20, 0x5}, 0x9a, 0x7, 0x7bb, 0x1, r14, 0x0, 0x374e}) 03:48:58 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4001104}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8c8) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x50, "61a18a2d05da0e919921427f284b35a0139f6b740db6f920be1f740429f0cad3363262f46d1767948eb5855b97a6b623dd964bbadcc3fe3337c08029ebc4ba247265c6b8603d95b5b8d65731f2a8a1ca"}, &(0x7f0000000040)=0x58) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r4}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x74}}, 0x0) r9 = shmget$private(0x0, 0x3000, 0x4d26ef631bfce5cc, &(0x7f0000ffa000/0x3000)=nil) shmat(r9, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r8, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000100000000000000000000000000400006003c000100000000000000fd1f898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@rand_addr="42153ee54a19e2a298ec9c0dfdda8c55", @rand_addr="14243ad175ee8b77323f42d34e1f6ebc", @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x3ff, 0xfffd, 0x200, 0x796, 0x40080, r8}) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r11, 0x0) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) [ 255.550463][ T9333] R13: 00000000004c7f9d R14: 00000000004de3c8 R15: 00000000ffffffff [ 255.558419][ T9333] Modules linked in: [ 255.574481][ T3901] kobject: 'loop0' (000000008ee17150): kobject_uevent_env [ 255.586503][ T3901] kobject: 'loop0' (000000008ee17150): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 255.588143][ T9333] ---[ end trace 76d9985b9212ec9a ]--- 03:48:59 executing program 4: getsockname$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0xfffffd42) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x60bb968e6d9a2989, 0x0) close(r0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) [ 255.636932][ T9373] kobject: 'loop0' (000000008ee17150): kobject_uevent_env [ 255.673786][ T9373] kobject: 'loop0' (000000008ee17150): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 255.700100][ T9333] RIP: 0010:skb_panic+0x176/0x178 [ 255.725229][ T3901] kobject: 'loop2' (00000000ca561afb): kobject_uevent_env [ 255.750003][ T9333] Code: 53 09 fc 4c 8b 4d b8 8b 4b 70 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 60 39 47 88 ff 75 c8 ff 75 c0 e8 82 7f b7 fb <0f> 0b e8 27 f1 cd fb 4c 8b 6d 08 e8 fe 49 09 fc 48 c7 c1 00 46 47 03:48:59 executing program 1: syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000100)=0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed1", 0x1fb) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x102, 0x8000003}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd0028080}, 0x228, &(0x7f0000000540)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x30bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0x25d, 0x8, 0x2}]}, 0xfffffffffffffd4e}, 0x1, 0x0, 0x0, 0x40}, 0x24044885) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r9 = dup2(0xffffffffffffffff, r8) r10 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) dup2(r9, r10) r11 = dup(r3) open(&(0x7f0000000400)='./file0\x00', 0x200000, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1032}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="10002dbd7000ffdbdf250200000024000700080001", @ANYRES32=r7, @ANYBLOB="080088052b0fcecc00240979ad61145f14392b8ac4e74387b6e12f9bc27a85ef460a9fe818c8a18bb8b71a79b4c51479447d64210d86fb415ddd8da0ff53ce9aca44f2a3ebe21c7584be891c117ffebf722e5d7c65196e0d125471b5cc7bbf00"/108, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYBLOB="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", @ANYBLOB="0c000200000000000000000008000100000000000c00080006000000000000000c0004000000000000000000"], 0xb}}, 0x4000000) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000426bd7000ffdbdf25050000000c000300010000020000452e0800000c00030004000000595c7ec798f3000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x68bfa0df19c7b291}, 0x40000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf25010000000c00080005000000000000000c000400050000000000000008000100000000000c0008040400000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040818}, 0x8000) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) r14 = getpgrp(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x4, 0xee01, r0, r13, 0x0, 0x20, 0x5}, 0x9a, 0x7, 0x7bb, 0x1, r14, 0x0, 0x374e}) 03:48:59 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x3, 0x0) write(r0, &(0x7f0000000040)="4cea", 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:48:59 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000100)=0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x1fb) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x102, 0x8000003}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd0028080}, 0x228, &(0x7f0000000540)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x30bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0x25d, 0x8, 0x2}]}, 0xfffffffffffffd4e}, 0x1, 0x0, 0x0, 0x40}, 0x24044885) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r9 = dup2(0xffffffffffffffff, r8) r10 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) dup2(r9, r10) r11 = dup(r3) open(&(0x7f0000000400)='./file0\x00', 0x200000, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1032}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="10002dbd7000ffdbdf250200000024000700080001", @ANYRES32=r7, @ANYBLOB="080088052b0fcecc00240979ad61145f14392b8ac4e74387b6e12f9bc27a85ef460a9fe818c8a18bb8b71a79b4c51479447d64210d86fb415ddd8da0ff53ce9aca44f2a3ebe21c7584be891c117ffebf722e5d7c65196e0d125471b5cc7bbf00"/108, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYBLOB="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", @ANYBLOB="0c000200000000000000000008000100000000000c00080006000000000000000c0004000000000000000000"], 0xb}}, 0x4000000) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000426bd7000ffdbdf25050000000c000300010000020000452e0800000c00030004000000595c7ec798f3000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x68bfa0df19c7b291}, 0x40000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf25010000000c00080005000000000000000c000400050000000000000008000100000000000c0008040400000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040818}, 0x8000) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) r14 = getpgrp(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x4, 0xee01, r0, r13, 0x0, 0x20, 0x5}, 0x9a, 0x7, 0x7bb, 0x1, r14, 0x0, 0x374e}) [ 255.780850][ T3901] kobject: 'loop2' (00000000ca561afb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 255.801359][ T9391] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 255.845793][ T3901] kobject: 'loop4' (000000007157a918): kobject_uevent_env [ 255.886446][ T3901] kobject: 'loop4' (000000007157a918): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 255.979288][ T3901] kobject: 'loop1' (000000009ee10efd): kobject_uevent_env [ 256.016401][ T3901] kobject: 'loop1' (000000009ee10efd): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 256.044490][ T3901] kobject: 'loop4' (000000007157a918): kobject_uevent_env [ 256.052149][ T3901] kobject: 'loop4' (000000007157a918): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 256.057223][ T9333] RSP: 0018:ffff888058666d58 EFLAGS: 00010282 [ 256.071525][ T3901] kobject: 'loop2' (00000000ca561afb): kobject_uevent_env [ 256.096397][ T9333] RAX: 0000000000000087 RBX: ffff8880a4d43640 RCX: 0000000000000000 [ 256.113087][ T9333] RDX: 0000000000000000 RSI: ffffffff815cc5a6 RDI: ffffed100b0ccd9d [ 256.118610][ T3901] kobject: 'loop2' (00000000ca561afb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 256.135243][ T3901] kobject: 'loop1' (000000009ee10efd): kobject_uevent_env [ 256.142540][ T3901] kobject: 'loop1' (000000009ee10efd): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 256.151244][ T9333] RBP: ffff888058666dc0 R08: 0000000000000087 R09: ffffed1015d26159 [ 256.184419][ T9333] R10: ffffed1015d26158 R11: ffff8880ae930ac7 R12: ffffffff88474640 [ 256.194150][ T9333] R13: ffffffff866a1abe R14: 0000000000000048 R15: ffffffff88473920 [ 256.208244][ T9333] FS: 00007f9c29b27700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 256.220845][ T9333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.225717][ T3901] kobject: 'loop4' (000000007157a918): kobject_uevent_env [ 256.227508][ T9333] CR2: 00007f663bdfc518 CR3: 00000000a2c82000 CR4: 00000000001406f0 [ 256.236099][ T3901] kobject: 'loop4' (000000007157a918): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 256.245435][ T9333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.261223][ T9333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.269271][ T9333] Kernel panic - not syncing: Fatal exception [ 256.276777][ T9333] Kernel Offset: disabled [ 256.281107][ T9333] Rebooting in 86400 seconds..