[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2020/04/23 17:55:23 fuzzer started 2020/04/23 17:55:26 dialing manager at 10.128.0.26:42927 2020/04/23 17:55:27 syscalls: 3000 2020/04/23 17:55:27 code coverage: enabled 2020/04/23 17:55:27 comparison tracing: enabled 2020/04/23 17:55:27 extra coverage: enabled 2020/04/23 17:55:27 setuid sandbox: enabled 2020/04/23 17:55:27 namespace sandbox: enabled 2020/04/23 17:55:27 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/23 17:55:27 fault injection: enabled 2020/04/23 17:55:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/23 17:55:27 net packet injection: enabled 2020/04/23 17:55:27 net device setup: enabled 2020/04/23 17:55:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/23 17:55:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/23 17:55:27 USB emulation: /dev/raw-gadget does not exist 17:58:12 executing program 0: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @null, @rose, @default, @remote, @remote, @netrom, @netrom]}, &(0x7f0000000080)=0x48) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000000c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x488001) ioctl$KDENABIO(r1, 0x4b36) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @any, 0x1}, 0xa) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0) r2 = socket(0x10, 0x3, 0x401) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x4, 0x5, 0x71, 0x100000001, 0x2, 0x3e, 0x977e, 0xb6, 0x38, 0x185, 0x5, 0x0, 0x20, 0x2, 0x8, 0x0, 0x401}, [{0x60000000, 0x4, 0x6, 0x8, 0x3, 0x17c0, 0xfffffffd, 0x9}, {0x7, 0x80, 0xdc2, 0x0, 0x15, 0x81, 0x1f, 0x6}], "6d4cbd05fa6e9b4ce26eea47d9101ddb734ca4b212f9222c8e1ead3ae47c4e20435f80fde9e4f3"}, 0x9f) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000002980)={0xa, 0x0, 0x0, @dev}, &(0x7f00000029c0)=0x1c) connect$inet6(r3, &(0x7f0000002a00)={0xa, 0x4e22, 0x7c, @mcast1, 0x2}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000002a40)={0x7fffffff, 0x8000, 0x3ff, 0x4, 0x2}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0)='batadv\x00') accept4(0xffffffffffffffff, &(0x7f0000004240)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000042c0)=0x80, 0x80800) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000043c0)={&(0x7f0000002a80), 0xc, &(0x7f0000004380)={&(0x7f0000004300)={0x54, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r7 = semget$private(0x0, 0x2, 0x4b2) semop(r7, &(0x7f0000004400)=[{0x1, 0x4d4}], 0x1) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000004440)={0xe, {0x7, 0x81, 0xd4, 0xe6, "80b326d2462fe9c88b41c209edced20e48d8f9cbcc39ac6f912bbcd55c9d317ae1dc0dddd01c2af14c10c9515d9896fbfa046b3ef8404be012de889e044ecc199d2bbf4b7c11175e01d11ebea6f810d01daa64d126a9d5c5829e911112267987539ade7972533a9c888afd6ea9966dceff9b18de9f07329412fcd164a48041cfdc61eab0ec7bf91b1656f8852b98747fa110bcf48cc01d7f3470d9ee202860046406bd286057835260629ef691c8202d0183e1a87a3972ff23506c4d71e8993a11a5cd35ee58f56f261ef0373115840500dcbae0cd9ab9e93ded598f3380b9676ac6892c1062"}}, 0xf2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000004540)={0x0, 0xea60}, 0x10) syzkaller login: [ 236.018315][ T7278] IPVS: ftp: loaded support on port[0] = 21 17:58:13 executing program 1: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0xa00000, 0xfffffffd, 0x400, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x98091e, 0xee, [], @value=0x83}}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)=0x10000) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000100)=0xad) ioctl$TIOCSTI(r0, 0x5412, 0xff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000180)={{0x3, 0x3}, 0x0, 0xfffffff8, 0x8, {0x3}, 0x3f, 0xffff}) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000240)={0x2, 0x0, 0x1016, 0x9, 0xd1d, {0x0, 0xaf83}}) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000300)={0xd, 0x5}) r3 = syz_open_dev$vcsa(&(0x7f00000005c0)='/dev/vcsa#\x00', 0x5, 0x202281) accept4$x25(r3, 0x0, &(0x7f0000000600), 0x800) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000006c0)={0x400, 0x7, 0x4, 0x42202000, 0x1f, {}, {0x3, 0x0, 0x4, 0x4, 0x7, 0x2, "bbd80b6e"}, 0x7fffffff, 0x0, @planes=&(0x7f0000000680)={0x7ff, 0x6, @userptr=0x1, 0x3}, 0x3, 0x0, r0}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf8, 0x453, 0x100, 0x70bd2c, 0x25dfdbfd, "ec63b588769c7e2a2258e9f87a04799a734a57843544b7e4883656381a2388b6ff5f19ee8ac16fb086f020c3929ec4a461a5427d9d17205c3f1c528eab674c2487bd646e96229633bb6e0dd389402ee61ae8521d401ce31793eb8d058f3b182eaf1f8aca0b0a17505ed10fdc59066ab91b2c26fcbff30c12c0abdc69791c9cd79b298feeb2c5a48a8ba223f19db94a4addd7d6b6892dda0da8d04f3d06053c07e0aa96d11ef4900ea24544cd1d12abf24f6b5c014e26e423ac2670119f80ac1b39b3cee4ef9ff15ade0f381113fcca1902d37618b36be6ca567fea339e8e7d7ada90e706172ee3", ["", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ttynull\x00', 0x2000, 0x0) ioctl$TCSETXF(r5, 0x5434, &(0x7f0000000940)={0x8, 0x4, [0x42b9, 0x6, 0x5, 0x7f, 0x1ff], 0x5}) [ 236.174841][ T7278] chnl_net:caif_netlink_parms(): no params data found [ 236.254638][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.263842][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.273370][ T7278] device bridge_slave_0 entered promiscuous mode [ 236.284669][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.292652][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.302117][ T7278] device bridge_slave_1 entered promiscuous mode [ 236.330131][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.342367][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.374003][ T7278] team0: Port device team_slave_0 added [ 236.383932][ T7278] team0: Port device team_slave_1 added [ 236.409634][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.416640][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.443891][ T7278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.458725][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.465755][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.510566][ T7278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 17:58:13 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x60102, 0x84) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r1 = creat(&(0x7f0000001080)='./file0\x00', 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001100)=0x0) sendmsg$AUDIT_SET(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, 0x3e9, 0x8, 0x70bd26, 0x25dfdbfc, {0x4, 0x1, 0x0, r2, 0x7ff, 0x7, 0x1ff, 0x0, 0x1000}}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24000040) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={&(0x7f0000001240)='./file0\x00', 0x0, 0xf86531c0c3f07b1a}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000012c0)={&(0x7f0000001200)='./file0\x00', r3}, 0x10) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000001340)={0x5, &(0x7f0000001300)=[{}, {}, {}, {}, {}]}) getresuid(&(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)) syz_open_dev$sg(&(0x7f0000001440)='/dev/sg#\x00', 0x1, 0x210000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r4, &(0x7f00000014c0)=@random={'os2.', 'trusted)-\x00'}, &(0x7f0000001500)=""/34, 0x22) connect$unix(r4, &(0x7f0000001540)=@abs={0x0, 0x0, 0x4e22}, 0x6e) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x5, 0x210, 0x9, {}, {r5, r6/1000+10000}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x3b, 0x2, 0x0, 0x0, "eccb0c241b12ab9130810b54f55a54eaf18b563a218214e55b606e257776a4e6887551381946ea834ae5a4962a4275660697a3e705424b2feaad7483afc2b636"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000001700)) r7 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000001740), 0x4) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000001780)={0x2, 0x0, [{}, {}]}) [ 236.533700][ T7432] IPVS: ftp: loaded support on port[0] = 21 [ 236.641385][ T7278] device hsr_slave_0 entered promiscuous mode [ 236.697887][ T7278] device hsr_slave_1 entered promiscuous mode [ 236.783578][ T7444] IPVS: ftp: loaded support on port[0] = 21 17:58:13 executing program 3: r0 = socket(0x9ee4f7471e76cbd9, 0x0, 0x50000000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x121000, 0x0) ioctl$void(r2, 0x0) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) tee(r3, r2, 0x0, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xba, 0x143000) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000280)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3ff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = accept4(r0, &(0x7f0000000540)=@ethernet={0x0, @link_local}, &(0x7f00000005c0)=0x80, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000600)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000640)='devlink\x00') r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000840)={0x2, 0x1}, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000008c0)={0x2, 0x4, 0xffffffff, 0x8000}) [ 237.175999][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 237.277441][ T7278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.354232][ T7278] netdevsim netdevsim0 netdevsim1: renamed from eth1 17:58:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x9, 0x10, 0x100000001, 0x400}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0xe0487b3}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0x100}, 0xc) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) syncfs(r2) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/99, 0x63) fcntl$getown(r0, 0x9) accept$inet6(r0, &(0x7f0000000200), &(0x7f0000000240)=0x1c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x8200, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000300)=""/19) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x5, 0x100) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000340)='./file0\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000480)={0x2}, 0x2) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r6) [ 237.426440][ T7444] chnl_net:caif_netlink_parms(): no params data found [ 237.450758][ T7278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.455230][ T7689] IPVS: ftp: loaded support on port[0] = 21 [ 237.518729][ T7278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.659041][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.666229][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.678018][ T7432] device bridge_slave_0 entered promiscuous mode [ 237.734664][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.747124][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.755050][ T7432] device bridge_slave_1 entered promiscuous mode 17:58:14 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x7}) write$fb(0xffffffffffffffff, &(0x7f0000000180)="f1a03c273c32166a37368714c03927ed8a34d91d4fbbf34d8a1a326dfcaa23586585eebcf92ba15bd70c4aeb93932661c74712091e4f7e833f6295b87807629199b41c7058933055bd931e34a6277d55bdfb22434df23426bc72e2859b993c54c5c93f3b4e4bd95d4ac9d723cdd9b7b0661a1e2798a9575079ee00ca1a6c1b4a431bf193f566926d4fb58ce561ee7fc785e8cc7b8239c20e21e4640b1e14eeb8aff20e8dcc8cf76d6063a9e9d06d10eebb5261edd24001b7dfb2fca9b97587ee49d55073fb54542290872181fb2434c39a7ec54c198df1da70897e9fe8027c06a06f6530c0", 0xe5) r2 = shmget$private(0x0, 0x1000, 0x54000108, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000280)=""/141) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={r0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000580)={0x1438, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x81}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3ff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffa24}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11e0, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x91, 0x1, "409f8b15ab3dabce2d58d20ee9676948b5bd4c4ba0473ba94fb50a1fe22074c88e709ebbaf08fb056e542b036fbd8fcb28d091a13b1450d1d9c3b5a554b8e93b26b46ca1e545bc55d671748516fbc297cf01680d090e9de1075c65ddb9e227d9f813adffaab30fca9c5d668079c045702e544caa0f887bdb37d47b7e540c84ec148dcfa0100be4cf06f806d417"}, @NL80211_BAND_60GHZ={0xa4, 0x2, "795160157eb31f823ecc87a6ad9eb976de5d7e72355958baa1551ab3fe05246564507932788e90b5fc8a47f9216ad65bbda1a48df7fa1c34ad659d2b39c97e1c8c6f77975f55c636d6c1455ae35b141513b864ec9dad753901d66845b400278927692da05895b3859a03e6df9f4548f0d8cc76f008758bd417158feb0fcca335438eb3a03d68e17443677c97bf0648db80f2c8c590664bd74e6dd4559a850053"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_60GHZ={0x46, 0x2, "9a29d5f65c4eee347fcd2fcf6939e0546b1ecfe2b6d0c3b1dd7508e89dfa12f7993d665aa6ec4eeef9d3ec32816637de9092dc66c474d97c99ce914fe24e20288c51"}, @NL80211_BAND_5GHZ={0x32, 0x1, "600ebe56ef28d9b942c90e61896efd49ce1f35b695df150344416f6d1140602aeb53db5b1ed50aaaf5ea169e1933"}, @NL80211_BAND_5GHZ={0x24, 0x1, "53ea5657e1a666ff537316b0b4b3943a2414938aa1efd0ce1dcc8c93af1ed227"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1c4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x69, 0x0, "101918746fe5a955533c1787624b163146272b64c2caf4464d55b6f46f1b3c5eb1767126ff8f7b5cfb2c75c172a593bd94f52c12434a2f0009135e9ac2d6cc78f823c1531cd5ae9e2f3d5a7292455cefa1630edd8da45ac9226839a65eb75d92d2b2498b40"}, @NL80211_BAND_2GHZ={0xb6, 0x0, "dcaec78e9026e0849901252424e566872e56f595dc1ec24f8b240145fe1a21725d9447fb07710630a0a6097f60bc2df2b13bea95ae54d0cd12764d560ab4df71f63e3c00d5b474e676b81a85b71c5dfa8b65dde0e48f85e74970571d3860182ccf5529429c0740c155d2bde6e1547ffe71a30a88f01b5b666e20d66908f3cd207e7dced28d5ab4738c3e638077731586dd2ea5478faeff5c5c5e82c94385cac0b89370f7f4f67d43ecfab38ec39bda419275"}, @NL80211_BAND_2GHZ={0x2f, 0x0, "9efbbdc8d718dda3e64a7244562d835e59468cb86e6bd43d260391dda10e57845a78ba130148ca75d210dc"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x67, 0x2, "42f3756a43e494c7ad9f3c1819949a3d82153a80d1dba33d81b68a1e0cbb619928c8788d48df071c7ef521a088bbfd07a9027ec9f4bd60aca0c0319b482f1f0b3c6dd042b091da4bbf4704f813963df659510fbd5f9235f9a0c1f9048098a5ddb46753"}]}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x5]}, {0xa, 0x0, [0x12, 0xe, 0xd, 0x12, 0x10, 0xe]}, {0x6, 0x0, [0xa, 0x5]}, {0x5, 0x0, [0x3]}, {0xc, 0x0, [0x19, 0x19, 0x11, 0xa, 0x1c, 0x7, 0xa, 0x19]}, {0x8, 0x0, [0x1a, 0x1c, 0x11, 0xf]}, {0x4}, {0xb, 0x0, [0xa, 0x9, 0x11, 0xd, 0x6, 0x8, 0xb]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x1438}, 0x1, 0x0, 0x0, 0x40810}, 0x8810) r5 = semget$private(0x0, 0x4, 0x0) semtimedop(r5, &(0x7f0000001a40)=[{0x1, 0x2}, {0x0, 0x1, 0x1000}, {0x1, 0xff, 0x800}, {0x1, 0x7ee, 0x1000}], 0x4, &(0x7f0000001a80)={0x77359400}) r6 = socket$inet(0x2, 0x5, 0x42) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) r7 = pkey_alloc(0x0, 0x1) pkey_free(r7) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000001b40)='macvlan1\x00') r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/hwrng\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001c00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001bc0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000001c40)={0xf, 0x8, 0xfa00, {r9, 0xa}}, 0x10) [ 237.855999][ T7751] IPVS: ftp: loaded support on port[0] = 21 [ 237.885442][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.923583][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.001653][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.010997][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.020016][ T7444] device bridge_slave_0 entered promiscuous mode [ 238.041480][ T7432] team0: Port device team_slave_0 added [ 238.088224][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.095338][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.105259][ T7444] device bridge_slave_1 entered promiscuous mode [ 238.128480][ T7432] team0: Port device team_slave_1 added [ 238.221974][ T7444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.236289][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.244198][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.271237][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.284265][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.293017][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.319862][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.347547][ T7444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.351553][ T7840] IPVS: ftp: loaded support on port[0] = 21 [ 238.381083][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.391764][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 238.415395][ T7444] team0: Port device team_slave_0 added [ 238.449245][ T7444] team0: Port device team_slave_1 added [ 238.509112][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.518291][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.527885][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.599969][ T7432] device hsr_slave_0 entered promiscuous mode [ 238.637199][ T7432] device hsr_slave_1 entered promiscuous mode [ 238.686956][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.694803][ T7432] Cannot create hsr debugfs directory [ 238.721595][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.732368][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.759941][ T7444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.807504][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.816162][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.826018][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.833327][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.843277][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.851422][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.877500][ T7444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.931089][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.050806][ T7444] device hsr_slave_0 entered promiscuous mode [ 239.097238][ T7444] device hsr_slave_1 entered promiscuous mode [ 239.136808][ T7444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.144426][ T7444] Cannot create hsr debugfs directory [ 239.165591][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.175037][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.184174][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.191356][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.350379][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.360705][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.369905][ T7689] device bridge_slave_0 entered promiscuous mode [ 239.382382][ T7751] chnl_net:caif_netlink_parms(): no params data found [ 239.410297][ T3455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.443465][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.453627][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.467917][ T7689] device bridge_slave_1 entered promiscuous mode [ 239.490649][ T7840] chnl_net:caif_netlink_parms(): no params data found [ 239.519242][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.533243][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.543084][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.605331][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.614128][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.629304][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.668962][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.681871][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.731870][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.741743][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.763871][ T7278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.775260][ T7278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.809939][ T7432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.851851][ T3455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.860704][ T3455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.883072][ T7689] team0: Port device team_slave_0 added [ 239.902447][ T7432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.971052][ T7689] team0: Port device team_slave_1 added [ 239.991422][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.999174][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.008014][ T7751] device bridge_slave_0 entered promiscuous mode [ 240.016977][ T7432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.073824][ T7432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.143529][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.152822][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.161314][ T7840] device bridge_slave_0 entered promiscuous mode [ 240.173312][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.181541][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.191086][ T7840] device bridge_slave_1 entered promiscuous mode [ 240.206507][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.213587][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.223367][ T7751] device bridge_slave_1 entered promiscuous mode [ 240.251294][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.258452][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.289874][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.305487][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.318209][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.350474][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.382172][ T7840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.420452][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.428334][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.451988][ T7840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.490064][ T7751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.500780][ T7444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.582936][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.662148][ T7689] device hsr_slave_0 entered promiscuous mode [ 240.706505][ T7689] device hsr_slave_1 entered promiscuous mode [ 240.746291][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.754197][ T7689] Cannot create hsr debugfs directory [ 240.763819][ T7751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.784917][ T7444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.839881][ T7840] team0: Port device team_slave_0 added [ 240.857066][ T7840] team0: Port device team_slave_1 added [ 240.887174][ T7444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.919314][ T7444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.985061][ T7751] team0: Port device team_slave_0 added [ 241.022151][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.029597][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.057167][ T7840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.070779][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.078535][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.104626][ T7840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.122162][ T7751] team0: Port device team_slave_1 added [ 241.199077][ T7840] device hsr_slave_0 entered promiscuous mode [ 241.246534][ T7840] device hsr_slave_1 entered promiscuous mode [ 241.276002][ T7840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.283835][ T7840] Cannot create hsr debugfs directory [ 241.293884][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.306940][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.350402][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.358322][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.386263][ T7751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.400597][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.407960][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.434636][ T7751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.496353][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.504928][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.529531][ T7278] device veth0_vlan entered promiscuous mode [ 241.586871][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.595679][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.660011][ T7751] device hsr_slave_0 entered promiscuous mode [ 241.716243][ T7751] device hsr_slave_1 entered promiscuous mode [ 241.766203][ T7751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.774003][ T7751] Cannot create hsr debugfs directory [ 241.843879][ T7278] device veth1_vlan entered promiscuous mode [ 242.091746][ T7689] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.126827][ T7689] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.193818][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.202946][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.219418][ T7444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.245516][ T7689] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.288173][ T7278] device veth0_macvtap entered promiscuous mode [ 242.305866][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.314894][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.323442][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.344735][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.351877][ T7689] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.400263][ T7278] device veth1_macvtap entered promiscuous mode [ 242.436140][ T7444] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.449845][ T7840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.522362][ T7840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.597422][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.610382][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.622317][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.631279][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.643406][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.654217][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.666083][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.673175][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.681403][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.690442][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.699234][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.706418][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.714283][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.723409][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.733372][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.749452][ T7840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.791566][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.818810][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.832959][ T7840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.858444][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.867928][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.877286][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.886011][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.893227][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.902119][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.911315][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.965135][ T7751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.997118][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.006523][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.017606][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.028365][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.037905][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.045066][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.123132][ T7751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.180382][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.189401][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.198760][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.208706][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.217962][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.227684][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.310569][ T7751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.358171][ T7751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.437146][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.447123][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.456648][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.465797][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.475040][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.484167][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.493970][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.503707][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.546850][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.556329][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.573053][ T7444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.586181][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.656795][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.675712][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.693197][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.704796][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.740432][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:58:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) r4 = accept$nfc_llcp(r3, 0x0, &(0x7f0000000040)) sendfile(r1, r4, 0x0, 0xff) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xd000) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @loopback}, 0x1b) [ 243.806980][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.814556][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.844117][ T7444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.962167][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.984177][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 17:58:20 executing program 0: dup(0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f0000000200)=""/146, 0x92}], 0x2, &(0x7f0000000300)=""/227, 0xe3}, 0x10000) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d6075594", 0x34) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 244.080234][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.090680][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.120947][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.170199][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.180099][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.194435][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.205869][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.268199][ C0] hrtimer: interrupt took 75773 ns [ 244.334775][ T8541] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 244.373292][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.386264][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.396312][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.403407][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.411832][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.421480][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 17:58:21 executing program 0: dup(0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f0000000200)=""/146, 0x92}], 0x2, &(0x7f0000000300)=""/227, 0xe3}, 0x10000) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d6075594", 0x34) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 244.430553][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.437718][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.446044][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.460469][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.471876][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.509027][ T7840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.575861][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.584067][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.651777][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.674698][ T8547] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 244.686446][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:58:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x3f00}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) [ 244.710658][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.725925][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.747465][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 17:58:21 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x10) [ 244.762481][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.772221][ T3456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.816728][ T7432] device veth0_vlan entered promiscuous mode [ 244.843364][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.853029][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.862176][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.875899][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.902584][ T7840] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.939222][ T7444] device veth0_vlan entered promiscuous mode [ 244.954598][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.963316][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.972122][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 17:58:21 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)) io_setup(0xffffffff, &(0x7f0000000000)) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) getpgid(r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)=0x0) ptrace$getsig(0x4202, r5, 0x5a, &(0x7f0000000180)) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, 0x0}]) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0x4, 0x0, 0x400, 0x9}, 0x10) [ 244.986122][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.994105][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.026669][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.081877][ T7689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.096256][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:58:21 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{@none}, {@none}, {}, {}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16222, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000100)) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) close(r2) [ 245.122900][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.134510][ T7432] device veth1_vlan entered promiscuous mode [ 245.162342][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.185613][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.212395][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.232076][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.245302][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.252408][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.276895][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.292901][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.313896][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.322779][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.329965][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.351175][ T7444] device veth1_vlan entered promiscuous mode [ 245.403637][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.416619][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.428449][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.497901][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.514207][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.533578][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.543143][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.561896][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.570896][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.587633][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.597489][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.605806][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.614141][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.678823][ T7751] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.696785][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.705627][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.714000][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.724023][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.735729][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.757691][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.805516][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.815645][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.824092][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.831405][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.842612][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.851738][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.861122][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.868282][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.877013][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.885165][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.900813][ T7432] device veth0_macvtap entered promiscuous mode [ 245.939175][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.949505][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.960934][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.969864][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.978994][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.989661][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.999340][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.009276][ T3272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.023339][ T7432] device veth1_macvtap entered promiscuous mode [ 246.050558][ T7444] device veth0_macvtap entered promiscuous mode [ 246.063078][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.077176][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.089166][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.100063][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.109284][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.141722][ T7444] device veth1_macvtap entered promiscuous mode [ 246.187155][ T7751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.198181][ T7751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.210427][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.219010][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.228007][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.237648][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.246766][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.257184][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.267195][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.276233][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.285085][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.293392][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.306846][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.321143][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.333408][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.356550][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.365546][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.374084][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.393993][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.406584][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.419714][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.446280][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.455665][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.467036][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.475444][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.503588][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.512672][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.521348][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.530547][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.550293][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.561326][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.572283][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.583967][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.596565][ T7444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.607875][ T7689] device veth0_vlan entered promiscuous mode [ 246.676236][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.689087][ T3453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.701436][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.712748][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.723642][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.736503][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.748574][ T7444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.797433][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.807075][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.817199][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.825328][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.839983][ T7751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.884558][ T7689] device veth1_vlan entered promiscuous mode [ 246.961369][ T7840] device veth0_vlan entered promiscuous mode [ 246.994543][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.002985][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 17:58:23 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x8010000000000084) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0xfc, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x2040, 0xa) sendmsg$inet6(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) pipe(&(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xb0}, 0x8) creat(0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x99, 0x301000) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) [ 247.085766][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.098536][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.190352][ T7840] device veth1_vlan entered promiscuous mode [ 247.283067][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.301952][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.325928][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 17:58:24 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x61, 0x11, 0x1c}, @jmp={0x5, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 247.368216][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.472745][ T7689] device veth0_macvtap entered promiscuous mode [ 247.513226][ T7689] device veth1_macvtap entered promiscuous mode [ 247.545450][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.566866][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.587630][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.609228][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.629929][ T7840] device veth0_macvtap entered promiscuous mode [ 247.665011][ T3455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.695886][ T3455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.705780][ T3455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.752481][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.794378][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.814183][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.836009][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.847736][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.869928][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.890531][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.903282][ T7840] device veth1_macvtap entered promiscuous mode [ 247.924581][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.932910][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.982571][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.007961][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.024500][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.040487][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.052639][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.071140][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.095668][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.108152][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.146687][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.156600][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.167014][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.178790][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.188679][ T7751] device veth0_vlan entered promiscuous mode [ 248.202924][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.211396][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.277629][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.288196][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.298169][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.311474][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.321465][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.332165][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.343340][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.353961][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.365706][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.378078][ T7751] device veth1_vlan entered promiscuous mode [ 248.457047][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.472917][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.482198][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.495401][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.506951][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.517933][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.530259][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.540297][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.551059][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.561071][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.571721][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.584662][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.677174][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.686194][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.695178][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:58:25 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 248.794216][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.803008][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.876605][ T7751] device veth0_macvtap entered promiscuous mode [ 248.978232][ T7751] device veth1_macvtap entered promiscuous mode [ 249.043262][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.067432][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.128694][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.152853][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.175370][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.195545][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.220800][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.243774][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.263587][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.296523][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.338647][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.369353][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.396375][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.415396][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.434583][ T2805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.486229][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.523486][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.556527][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.575198][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.589670][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.603535][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.628057][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.659769][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.670336][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.682123][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.706210][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.724190][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.732863][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:58:26 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffc1, 0x3ab, &(0x7f0000000380)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040c", 0x7d}], 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'ipvlan0\x00', 0x3}, 0x18) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0)={0x6, "4d5d17"}, 0x6) sendto$inet(r0, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400001, 0x0) getdents64(r2, &(0x7f0000000240)=""/223, 0xdf) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), 0x4) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000001c0)=0xfffffffd, 0x4) 17:58:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000040)="d2f825460cddbde0e36e4e96b3beaf7aa1ee056105788d", &(0x7f00000001c0)=""/199}, 0x20) socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x60, r5, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x60}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000", @ANYRES16=r5, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8814}, 0x20008000) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80080d8c560a117fbc45ff81054e220000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001", 0x4b}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000005c0)=0x84) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffee5) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 17:58:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB="2886e83765abc0747c459b69b0e418f61515aba4cfa1b60660a6fabcecaf5ff89840ccbdd9b7cfb268362448cd5e8ff55b0f46cec12b23530b73adb3bfd7365f81b4e3f1bc45536349825c83399ab7855b37a600000000a16679c6f444436dcd4c62a080ad17a5af6a19d8652ca1e55bbc1f44e441216a8d695658449aa973d803aff3ac7686a5e652bece934b6fb4bf60512f7500b3ccd77bfb6db20124f809f76f27151f7e510ab54881bcc53714ef19271fd6938ef1f9d96500"], 0x38}, 0x1, 0x0, 0x0, 0x14000}, 0x0) 17:58:26 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) mprotect(&(0x7f0000e6f000/0x2000)=nil, 0x2000, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0xfffffffffffff7fc) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) ptrace$cont(0x20, 0x0, 0x974e, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/ipc\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="74eb01c52b3d5dfdec798b1bf1a1373972d362a405cee63ab3b0b294dc3475af5b07afc3076600"], 0x0, 0x4}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x4, 0x8, 0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 17:58:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) fadvise64(r1, 0xb8b, 0x2, 0x5) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@alg={0x120, 0x10, 0x400, 0x70bd2a, 0x25dfdbff, {{'morus640-sse2\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x3f}, {0x8, 0x1, 0x1f2c}, {0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x80000001}, {0x8, 0x1, 0xc288}, {0x8, 0x1, 0x9}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000080}, 0x4010080) r3 = syz_open_dev$radio(&(0x7f0000001480)='/dev/radio#\x00', 0x0, 0x2) preadv(r3, &(0x7f0000003cc0)=[{&(0x7f0000002b00)=""/4096, 0x1000}], 0x1, 0x0) 17:58:26 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 250.263327][ T8654] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 250.422921][ T8655] XFS (loop4): Mounting V4 Filesystem [ 250.537218][ T8655] XFS (loop4): empty log check failed [ 250.566120][ T8655] XFS (loop4): log mount/recovery failed: error -5 [ 250.617390][ T8647] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:58:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x64}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000140)='GPL\x00', 0x44, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) [ 250.703583][ T8655] XFS (loop4): log mount failed 17:58:27 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8100000086dd60d6735100442f00fe8000000000100000000000000000bbff0200000000b846a021d8deac65d61f72e766000000000000008000010420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000"], 0x0) 17:58:27 executing program 5: r0 = gettid() creat(&(0x7f0000000040)='./file0\x00', 0x10023) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x880002}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r1, &(0x7f0000000080), 0xc, &(0x7f00000000c0)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/4, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x480000, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net\x00') 17:58:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001580)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e", 0x8e}, {&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e216667c6f72b64fdcad802718d16b390d4b4dc05bffb838b7e6831cc53b65b1de0bbf6af1311a722a80065913d37bea8c988e3b3f05ab1eb02d6b52a11191f1ced75b0200502e5f2881204104e152b5644da9d26301ed8905156a069c61444d44d82c135ff4f20574247a4a5cc963e3c395a029125ccae1f1564a3e28e06b1a08e47bd1a9621edf1003d167cbdfc0be2a4914908198575a688a38d24bdc9881ced9fe04e119a87b9286ea15aa168163a9650a26a926c571f2f0e0b2102de1fd1a6920cb71d846f02b2c23f80a3c0116b48d14925e69c4a65126e544995e0cb5fefaa870ddd66e8eb47a3be8f07fcd361dcf144c865fe355e3b98e6d4694d74aa6d3d75c7c568feabdcb483c5c22ca40782cd2dea789dc677c603227878c369a3b7a3204bf1bc9b1fdb1e00447152e854095b9527d6e980b1bac1b1ec6e9706084ac77b383bd4e555a11410f6a830966ec9b0fa58abf22238638ea06bad5baa2b55174b0db5108d79849c1028550fb3c713875478805f961b04f94a70dcde91c0d2ea2bcd0d2dd83b09cd6a0975db4257bf599f7d82462f914e4e641aa399ba721e72fd53d21af1f5d2a075bfd90044c562027ec840170b2d4b67adf68ed790a5ce5a49933f55c0df0b2a2ae252b5bf00b5ca0ec0005674ac62eee923cae59edeab59c1d00ca6d6f56c5ed7", 0x2b3}], 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x3dd2}, 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x6a08, 0x11, 0x0, 0x27) [ 251.081213][ T8655] XFS (loop4): Mounting V4 Filesystem [ 251.216087][ T8655] XFS (loop4): log mount failed 17:58:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b0b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000240)={0x0, 0x7bdc, 0x7, 0x0, 0x7, "5f1c7b908ad3d4c046b1a205f91f784e52cff6", 0x9}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x36}, 0x1ff}}}, 0x84) 17:58:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x220902, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendto$inet(r2, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={r5, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x6, 0x0, 0x42, 0x0, 0xf8, 0x8, 0x89}, 0x9c) ioctl$sock_ifreq(r0, 0x156ff, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_addrs=@isdn={0x22, 0x2, 0xb6, 0x2e, 0x4}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{0x5, 0x4, 0x6, 0x6}, 'syz0\x00', 0xd}) ioctl$sock_ifreq(r0, 0x898348f14677b3f, &(0x7f0000000040)={'rose0\x00', @ifru_addrs=@can}) 17:58:28 executing program 1: syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73697a65f81b2c6e725f696e6f8565733d312c687567653d616c776179733d2c00"]) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x3e0100, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) rt_tgsigqueueinfo(r1, r2, 0x2d, &(0x7f0000000140)={0x3a, 0xfffffffa, 0x7a8}) accept$unix(r0, 0x0, &(0x7f0000000080)) 17:58:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) mount$9p_virtio(&(0x7f0000000040)='syz\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='9p\x00', 0x18e0040, &(0x7f0000000440)={'trans=virtio,', {[{@cache_fscache='cache=fscache'}, {@fscache='fscache'}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@access_client='access=client'}, {@debug={'debug', 0x3d, 0xfffffffffffffff9}}], [{@uid_lt={'uid<'}}, {@euid_lt={'euid<'}}, {@uid_lt={'uid<'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf97bf72e0ddbb5da, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000300)='\x00') ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0xe43) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f2fecdb4cb92e0c480e000d000000e8bd6efb250309000e000100244e48ff050005001201", 0x2e}], 0x1}, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) getpeername$l2tp6(r6, 0x0, 0x0) socket$kcm(0x10, 0xf, 0x10) [ 252.053103][ T26] audit: type=1800 audit(1587664708.837:2): pid=8721 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15788 res=0 [ 252.121389][ T8725] tmpfs: Unknown parameter 'sizeø' [ 252.323262][ T8733] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.360863][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.368782][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.408698][ T8733] device bridge0 entered promiscuous mode [ 252.843903][ T8733] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.862700][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.869964][ T8733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.877587][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.884819][ T8733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.909816][ T26] audit: type=1800 audit(1587664709.697:3): pid=8732 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15798 res=0 [ 252.964924][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.972222][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state 17:58:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x10040, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) pause() 17:58:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000004000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x1, 0x0, 0xd, 0x17, 0x6c, &(0x7f0000000380)}) shmat(0x0, &(0x7f000000c000/0xc000)=nil, 0x4000) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f0000000140)=""/220, 0xdc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000240)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x107ff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) 17:58:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x5, 0x8e, 0x20, 0x0, 0xd}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)={r2, r7}) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:58:30 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:30 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0xffffff94, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400004a000200000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=0x0, @ANYBLOB="08000300e0000001"], 0x40}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) fstat(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, 0x1, {0x100, 0xfffffff8, 0x0, {0x3, 0x0, 0x200, 0x4, 0x0, 0x8, 0x43, 0x1, 0x3, 0x80000000, 0xfffff565, r4, r6, 0x1, 0x6}}}, 0x78) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20090) 17:58:30 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./bus/file0\x00', 0x1000, 0x8, &(0x7f0000000840)=[{&(0x7f0000000180)="6fe72f2aaf6da9f875daf9402f3c5e88cf7089612ef18bf08bf7aad74a3b1acdefd526f226b83f402493431bc1c29f91936e228e93ea9ca6a47a13008347bb63635ca0f890e6d4286c", 0x49, 0x6}, {&(0x7f0000000200)="ea1df6da70254b284fed80b15929b32d20e14d96a6730e26c6526e2deb8f45d43c9a49ea5d1e98df171afca40d918bcadcccac6cfaa73a2467472f5331a19a9c75f7", 0x42, 0x8}, {&(0x7f0000000300)="cb96e7f135f1225a29b772f3eeefcd549fedbc84812fe5f232887a5616f82fa946920c3178c170060c92f3f8e9d231cd8ced3a882b2bc3dedfcd59b9b8bb3cbc51635f6e2c73129d8e725c134c02d169836b99b073c8f5bfcc9388bab66eda436ce93cd0da879a7c7673a9e649881b16dd8d3fd9e585d464597d90dd213990b31384cbcbb7e08b91ce87d9864c30ae96680d7fb7a4955fa30c6d1bae938cc719cbfc181568f49d4fbb266e7991282fc63b1005c41842ad745970354d1f6e980a7a236df5278823f0633d18beffb093b6a7198c1a393fcb9069", 0xd9, 0x1}, {&(0x7f0000000400)="1174de735e59325835cad7fa447db03325e7a9f352a9850b37aca7c4e3e5c7c8b6df6b8dd2541b1346515651a77cc1998fa3d84f890339ccd0e149bd11ca7b3ba6679b941187b2715750cbbc02e599278eb7794d8797eb4cfe13e526f9d5681beaac15e099c21f4e7e7558906c137ded51dbb780d51e7852a7ad989deb60517cfa7ee499dbd084829cb71c7fa91b4390581c1223788aad09233ad4f03dc94752e8b16584149f9d855fcbedebcd91cd7e4b4ac28362ac557ada08e2e43def6bf8d621bed01758a857a7a3e13897df9278e13bd6b83135d5418f76c7f602e8cf", 0xdf, 0x2}, {&(0x7f0000000500)="b295a48420a2f718e47203bb53a953af579479c46b0a4aef3c8a617f63c834062ea1b75b14db384f6d68232c36a012efeda07ac45dc197eb222a47266af1afb60ce1ab303c8d980b5248fcc0a13bd7143f390921c27c9cd0ccae1a41fc0103b7231a", 0x62, 0xffff}, {&(0x7f0000000580)="d4522ad9e6c44dbb41aeea55e2fdb32433c40bd95174b8f96b0d8c601d3daf4b3ddeb67b353817e2b2a5fb0736ed488439cded71f879a20919a0878db9b5f169b60265c8c0c2b70b160e3378d9c48a22654e8ae5e890ba9b1733bec26f96d340223991b0d87d7d52b885a5a7094e1ee2abb8eef6744ae3ec361c2fe70f59ee646fd231990d1875eb305d98a77222fe611e0cb13fcbb14cb5395c107e1dfead544e597e74b6c60b123461", 0xaa, 0x1}, {&(0x7f0000000640)="860a8ade41261b534ab83bf886a597e036085e93aa3b0fd30aa868ff6838653b419f95b03fa9c7e83eefeac7b25d3b4dea83345d2b6652e17e5cfc3115cd6c69b6c8c3fb04a27622e0c12d2f8674c8a65b3541ce478c093c5f9706a117a1428947b0840b3efa17923cf2680516239acd2717b45e5dac64a02ff07228e6f48fb6cbb00b96497f6838034d78c8cf7cec5d8957f0abc44a8352d7b25108f45c58044b13ed7a321a07d6d31119110153419cb3d522d1358fcd803d2c942b8a81805503d353cf27fbf2aa49f1b924f79ff9", 0xcf, 0xc2a}, {&(0x7f0000000740)="088f398c536c4809ad021d90b42d08b007b3ea027b1b7341843cedd5d586892a99dac670e75eb9d36e1d123c26d700202fd4a9061742b953e8b7e0591b2ffd3888a8a7f05cc756b14d6106ea52dff00ba287fa774a743bf473d46af2cf1f8fdf40d8b98ec1ded43ccde5e7f2cfea73837575e0a41989bf130a781b8f7e66e22d2ab169bae7f32c6f8f3c706ffee81e1897e774093bce792a5aa072acb9be7454d4de8a305d4905bfd6cdc14008dca12dc8fcc570e3b530f2a3c54acf53a02bb4a01d4577e9bde85f8c0e14c5deb10b0fa3e9e2d6", 0xd4, 0x3}], 0x24400, &(0x7f0000000900)={[{@shortname_mixed='shortname=mixed'}, {@shortname_win95='shortname=win95'}, {@fat=@tz_utc='tz=UTC'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@obj_type={'obj_type', 0x3d, 'mime_typekeyringeth1:'}}, {@appraise='appraise'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$RTC_AIE_ON(r1, 0x7001) [ 253.857134][ T8770] FAT-fs (loop0): invalid media value (0x00) [ 253.891875][ T8770] FAT-fs (loop0): Can't find a valid FAT filesystem [ 254.058620][ T26] audit: type=1800 audit(1587664710.847:4): pid=8759 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15804 res=0 17:58:32 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) write$P9_RLCREATE(r3, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x88, 0x3}, 0xf29}}, 0x18) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'hsr0\x00', @broadcast}) 17:58:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x74, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR]], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x18000000000002a0, 0xab, 0x0, &(0x7f0000000380)="b9ff03000d698c00632f77fb9f4b4d2f87e5fe046aab8450131a39010108038da1924425181aa59ff43cc5a5983eea4444b31483c45ba0974abbdcbf0a9dcd7dfab6ad13d2655973ae31cb65098b47af5edaa8059ea22c6ccd954291f356a113bcf744267212bf4cf77f299dd2c646dc5c488e84e411e8776d3860aff02d36cdd6ebd350d7aadd1d75d801c831b145dd77ac1c790ea78fce0efb0394a27b760fd069ff6af60a187d96dce8", 0x0, 0x102, 0x60000000, 0x0, 0x8e, &(0x7f0000000000), &(0x7f00000000c0)="61ae793cb58796e98bec67538e015077de7e272f4c58590e0a49abbb02864ce87f29c55242edc400de0f90b385e2f9c937fd3b232ab7c99460628f97e6d6f935e88684d642fd966756e2d8b5af7a9002d71c203c4dd9b55ae6eb91e77d823ca1a2de2496a532933552dfb5907808176243ef5971c1a9c84ebfbd113d1a233ed5490f124afc9b88bc97d734a20b1e"}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x57, 0x402) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000008c0)=""/114) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0xa6}, 0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000300)) socket$kcm(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:58:32 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000016c0)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="8a5099cbc1264dd864df3900665ea04087a0a0fd162307566ba706a5061d7cac5fe3e27f4ff6e1d91c9d98f9072a53b590108131022f46a74b86b041e7b487a695945d21a87d75000063d69ec87a851c38214fe82d78cc83ba85afd81b5015f2697497004a6051e4a6329edc51bfa8b6a4330589c021e9f1ffc3f1c061b8a60d14766ab9f2ce4ee5cef4597219dc147eb938ef2e1fce6b74", @ANYRES64, @ANYPTR, @ANYPTR64, @ANYRESDEC]]], 0x0) mkdir(&(0x7f0000000740)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x0, 0x6, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0908, 0x80000001, [], @p_u16=&(0x7f0000000000)=0x1000}}) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x20, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) 17:58:32 executing program 2: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x58, 0x2, 0x2}, 0x20}}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 17:58:32 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 17:58:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0xb3, 0x0, 0x4, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x46802}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) sendto$l2tp6(r0, &(0x7f0000000000)="6d8ccfe3689bef10a18931e7f834a926a52c99d7cae918aaf632a73d2dda869286", 0x21, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x3, @loopback, 0x1}, 0x20) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000028030000000000009801000000000000980100009801000090020000900a000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074700000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000008956a30084b4c247fc61c37159d78abe00280000000000000000000000000000e1ff000000000000000000000000000004feffffff4e9fbc56137356866f65c61553226147f1ef14a2ccf5d99620c403cc73a28362374468930c59a853f91dffd4d8247717077096bf8148416711294e08800ade8f63da87953545f9f6515a6cfbde86d9a2491ce8d6deac2e151e0074256bc01f312b7da3ac3fe46a1d23dbc69f4803e6b75b5548888b8b790b642f91d1a2bb3fd3383fcdcfd5665c031a7fda"], 0x1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0x3, 0xc, 0x4, 0x2000000, 0x7, {}, {0x2, 0x1, 0x7, 0xa, 0x81, 0xad, "06600f27"}, 0xcbf2, 0xc, @planes=&(0x7f0000000100)={0x80000001, 0xc07c, @fd=r1, 0x800}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000200)={0x33, 0x2}) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) [ 255.482020][ T8798] autofs4:pid:8798:autofs_fill_super: could not open pipe file descriptor 17:58:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700000000000000000000007bc5c5ad18e6eb0fa8bc00", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746801200000180002001400010000000000", @ANYRES32=r1, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd39672f6513b060e}, {}, {0x4, 0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x74}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0a29fad500"/23], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="740000002c00270d000000000000000000000000ca84c52c48f5ee3c7f50c6fbbe0f658ecae1623466f24270fb2e340aa7e3868c1bdf6e475f8add81d14771f092d5a70475d33917087420d678a367032d00b5c04d9aeb2dd82497adca1e0c0e2cf88a1d74cb18b9195ff85cadad19021eabc0dfe9fa42d9460d1e0eaa716e7edc684a606b3e6d48216ac97fe5cebca54bde2948a9b3c30933d669", @ANYRES32=r6, @ANYBLOB="0e06000000000000040008000c0001007463696e6465780044000200400006003c000100"/92], 0x74}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x60) 17:58:32 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 255.921048][ T8816] autofs4:pid:8816:autofs_fill_super: could not open pipe file descriptor [ 255.930902][ T26] audit: type=1800 audit(1587664712.717:5): pid=8800 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15744 res=0 17:58:32 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$nl80211(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 17:58:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}], 0x20) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x100) splice(r3, &(0x7f0000000080)=0x1, r0, &(0x7f00000000c0)=0x7, 0x2, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 256.021886][ T26] audit: type=1800 audit(1587664712.747:6): pid=8798 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15816 res=0 17:58:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x0, 0x138, 0x158, 0x138, 0x268, 0x248, 0x248, 0x268, 0x248, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'macsec0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xf0, 0xfffffffffffffd5c, 0x0, {}, [@common=@unspec=@limit={{0x3d, 'limit\x00'}, {0x0, 0x0, 0x3, 0x0, 0x10000}}]}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x19, 0x7fff, 0xf9, 0x8, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffd}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x38c) 17:58:32 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 256.159375][ T8806] device hsr0 entered promiscuous mode [ 256.167089][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.236265][ T26] audit: type=1800 audit(1587664713.028:7): pid=8830 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15764 res=0 [ 256.277846][ T8833] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 256.331128][ T8836] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 256.346534][ T8837] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 256.809925][ T8799] device hsr0 left promiscuous mode 17:58:33 executing program 4: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x202}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 17:58:33 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="14000000000400"/20, 0x14}], 0x1, 0x0, 0x3c}, 0x0) 17:58:33 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010001fff0000050000000000ba73a009695e45c5e5cb00000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="857b4d86b69f1b73c42e9f0e22dfb8a986b084634b372c53b956ca4daf80267b408f1a7ff0a877deb0fc177d251aa9ab0789938db36b49ebfb557cfdabfee502e5c455931ba1e7e69e8e54"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 17:58:33 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x2021c0, 0x4) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000}, 0x20) 17:58:34 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 257.162499][ T8854] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.193273][ T8857] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 17:58:34 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x1402, 0x2, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x140f, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x20}}, 0x0) 17:58:34 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r5, 0x7c}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec900000000010000000100011800070000004000008000001415b1f0006d5ebe5a0000ffff53ef4bdc3504dc88871dbbb8049594233c3e06bc24026e3890bdd65766b42dbb4a15ea0874ef221f51a5f1335c24", 0x66, 0x400}], 0x0, 0x0) 17:58:34 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfae]}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xd39672f6513b060e}, {}, {0x4, 0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x74}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xe}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x7, 0x3, 0xf7f, 0x980, 0x5, 0x1000008, r6}) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r7, r2, 0x0, 0x283) 17:58:34 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:34 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) uselib(&(0x7f0000000040)='./file1\x00') mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file1\x00', 0x200) 17:58:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0x1, 0x0, 0x0, {}, [{0x40, 0x1, [@m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev}]}, {0x4}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 257.597896][ T8869] EXT4-fs warning (device loop2): ext4_fill_super:3747: metadata_csum and uninit_bg are redundant flags; please run fsck. 17:58:34 executing program 3: socket(0x1, 0x80000, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 257.752395][ T8869] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 257.869814][ T8886] EXT4-fs warning (device loop2): ext4_fill_super:3747: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 257.943649][ T26] audit: type=1804 audit(1587664714.738:8): pid=8889 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir431162277/syzkaller.5yn78U/7/cgroup.controllers" dev="sda1" ino=15750 res=1 [ 258.024162][ T8886] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. 17:58:34 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000240)={0x5, {{0xa, 0x4e24, 0x1, @empty, 0x83f}}}, 0x88) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x8, 0x3, 0x4, 0x2000, 0x4, {0x0, 0xea60}, {0x3, 0xc, 0x3, 0x9, 0x3f, 0x20, "9fe6052e"}, 0x73, 0x2, @fd, 0x7, 0x0, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x11, r2, 0x83000000) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) fcntl$getown(r7, 0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x1c, r8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x7ff, 0xfffffffffffffff8, 0x6, 0xffffffff}, &(0x7f0000000300)) 17:58:34 executing program 2: socket(0x10, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074700000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000e1ff000000000000000000000000000004feffffff"], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELDLCI(r2, 0x894c, 0x0) [ 258.272668][ T8900] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 258.301176][ T8901] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 258.335030][ T8902] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:35 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1132}) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240)=0xa954, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x0, 0x8}, 0xc) [ 258.618651][ T26] audit: type=1804 audit(1587664715.408:9): pid=8889 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir431162277/syzkaller.5yn78U/7/cgroup.controllers" dev="sda1" ino=15750 res=1 [ 258.711408][ T8901] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms 17:58:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x220840, 0x0) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x400, @any, 0x4, 0x2}, 0xe) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) 17:58:35 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req3, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0524fc606c001740020000", 0x1b}, {0x0}], 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x41084b27}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x73, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/923], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fbac141410e949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x602040, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, r5, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[0xfc, 0x2d], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x5c}}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x174, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x314}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffeff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x200000d0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x1, r2}) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x733462, 0x62) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) kcmp(r2, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r2, 0x0, &(0x7f0000000100)=0x1ff) 17:58:35 executing program 2: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) clone(0x100000, &(0x7f0000000480)="f3c378a8c5211219c3264ed545570f4b6bfd439974b89484dd706a1670be77495d81120d2cacac2ba86318ba1dae8a06ad48a042243ee4e2c05f90dd9004253e725be1f90fff542dc26ad207778d2b8fed145d4277ed392e099c6ff206d6a23fe67a13aa4f808657c01c08a689401324d3089c0c3187ec189236c337c3eb261c6882a3482f42fc289f0976df286ef3f9344d34efd4453169b2a38a23e7d6ce20b4d3525f8ba4d169118c912aff34b37b4b562105efe58270bc39d56ae26b67e01b22967f9040b894169d089a4527e01b0966669d912b651701c2426037e97ec55989808987189d9c81747187c089ed58dca1c8f657d8b4026232a59976b39bd2db34b6ccc09cee5f45580bd1b048bfe8b5141059506c5b87e48f8926465ae198cf21aa0205f059889e03b3d0b8ede4b8a96f26fe61208420a0fb4b7ef032c2e182319c14c19216f1f756d835764ec56eb3996e18e3b2d1662e2d7b148367aa3f6747722e3082f2fed12fb28e03e58fa676e92dac80c6ef524df3e962e95d42c1d1a366814c806d11391e86ebf2be259d36d43ada8c654023b01b4e973a8ab9dbf47756c1c547116b26e139956c3d65d2395f58d7753a10d797ab8dc1776a43958ae21dc8566976f8550f5e31f36b0b6b8b3678a422cf7eb171cea7cfb964587b495af6122059dbe551230c9b8d020666abb6747f52101aa6bbc68893ecb22bbe7bd2fe9c2ff4679dcd90f4a83a945bc22534a22b2035c00027021444facf58f71ecd272c0ccf0cd715907e44475c3fe02ea652d6cc4071f8f8a56abae4e546a48f67eef5381fdd4c2f49372d35299f500c478025fab05c8455fc5d4857b608b9312b423339f5cb948c7c02c16b92b2153cabe0e7e7c507cf6f3b46224c7a2fec2788f75a582cf298b666ad07107464ef0a72e68bc030632e70cafb17ef18fc98f818ce49dae193038d8222c524661aa6ef51baceafff751a0895d43f6c0f7d4b4c4c09a758fc91d0f3a05117028b8f179d26ee4f504381092f1946221c1a8773ed2f7fa8e71ff71ebbe8aecf3dad5d8dc97e4acb5752c38d89db46f3715b22bb3afd16002424792c334cf088c7a02e77159cd8ee81b26424d6a3fad714a17476e5bbb4336cd8c9d69e2f9c5a6cdbeb615d856ab85772e70e9958f1b52ec622986aaf2fd9ee69ddf36d6a2d2a44d13e2246575e46cded213f7fd4e3aee1d0fb7b84c21441c1e810a1dd60ce0e91179ebdce428492a0947cb02415a3481b4d2a8236e7aee5d8404da5d3220bff103032d85b4e86587adc4d929301e59d3ad255e621a786a71dd7225b8548ff7265b586af326630b1fcab47c1300997a52ccea681ee6280ea50a1fe464aba24d724fbb5f3357af98a6e474edfc4dd023a74444c61bb04a83ad0bd54bb27b60539e042b7be48270a0c0e2842a839097fe95af68852041f3f101269bde96fc271b331d72d5b1a93d58c3b34fb10d7c10d68f20b35b85933642f57f8aaba3335d4ee421f0c00ad5d60d602ea8a3ba545fe56bec45635bc53988a1233583831a5f47eb7342cce4edf2e82ea081098baf6fd1add6f90baf545f48d3a358aeecf737c1d433c9321b027ee357681e937a4f1a4c8dee90ebd8af56e9162ac6c9240a25aeaa55a2e592989bd7a264a39454b3dddf0e556d5c2404a44bf7758287cdccb2e1ac7d923622ea2cc8058795b7757e39157286d6fb7db749a69a7c840d43e32ca0238dfe4e22cce4a67af57716d8290dc705254e8dd7b2cd451b760df044572e512aed83457d3a290696b33ecc48523cdf551dddab0d61771e5eda12bd02b5bcea34f749d78a4beedee0f8884c57f4401ddc2ae237aa8243a2d88cc05eeb128d810f38223d2df4782b572d902dad47a57f108ca92f92f2d0547f5fa09452353153b031c511fb3071fefdcd5c1e114779966d9daf067cc65e053a6633443e5aa7ec4ba0be6a556ce33753f9f596191ca4a90beb7b378dc645a5b0d3f588767414b11a3ca4b6b43f4aec60349ba05eb325889b0c8f299085963abe4033da7af786821c123791b1a9e9012ac9997a751bf7a10ebc254a72443e38d69691b38d825f2226ec72b3dfa5f073afe247864eae17be65062611bc9dab422a7fcfd44908d90eca1852c432c02854f2e04f373052a101fe504bf55fe5a49ad408d8e710d859633abd78d0c1606c96d9035635bd9c201fa72f5f68cda24a93e900ecfce7fa31c26d978a158f4a1aea874d6accaccb3634c5440e3dfd788825273c7942a91d9b33833c088db213a39146f38a2424ea23c6f328c6f563ff31732589abf30a3862bca3d07360afaa1f11b88a2740b04f21371d0efc43fd9bbfd8b6eea5a8c9766b98db0cbb760d63d3b5c46987afdcc66980ad5faff08bfdb7fc1f95b82ecabdfb00fbedd96417936db4db4f49bf79dad93469052de6f600e2bcb473787671bceddbd4c7fe305ce1378590f52a0c02a7deed00b7c85b53269f169e76ab6b90744cc21407fbc8aa48755da6de14249826e7d754377476c8e70c2fca75681cf3f3445d7f90866eef8cadba2279c05e6559edcbea01a8f6881b1707035d10aa18ea3c539da57d8225a248c5996017c515f5c146e7ac1551d84c8f3650954daf23cb1c512258897b78167f1ed865f8b194d5ecf04150d705ef2921f27b59b08cd9e1c468ce4d00413152de127badc5f3f75a464ed786181df2e35ce7ae88d912534dd0306f4f3c2a3875b70706570c52e06ee57c25743c4e68ddc8531574fdd9e51e2a19b27271ab20fdfcb5c96ba3d966344458aeaae4562a7598a82b0e83780a21c724d5177f7343d94846b6aa0991932665e9c7500f7c069296e869968d90802758e929a57e8c9aae12ff5b3a270a1eb5fce7ce93319c4e4073239ddaa88f2c2eb8f3f99bd93610a1e826f953ffed28fba45309a4eaf8b31dc58440b43d5dd0c47c14a85cb578ac889ec6e94ae36f4820989159c3b72a2fd0f47335693460cdfef49b6f3a60582200918216afcc7e01d4cd1aa16e5de9511cb15327b15d1999ee3917adca21a8764bb00b05d19f6e18f9f17b882da5cde37bf6b71358aabdfe391ca3d6619b97580dcde425194585dd8972a5746d7d2992b09aee337fa9a5708ba268a82df1ee621c7f0f569f9912c408e51d427967d59a5261123f756ebe01c8f0e839220b840049974122425f43c73b68d423d15b6d0f03b1ff256c52c307febf30f672c60cefea586b41e1466a66e9a80638c9a5fa8a42aa22851358e1b819b6f8c5a807592fbbf55e62d79a2259f55312091772cf47036eac9a71da71aa06d7891af7e537e9eaa356897ab04ff5afa17cdc70b818af3b9f3d3d94b673d394e2bca9558c6172952eab41598ddc87a5c658d2d3b1293f2e206c078ebcc07156224cab27dd4d760ec6d3dce80fb26377ba232946c0b9c39d42c368267ba848554d9f10f5afdb703c3180173b1db0b3cf70044ffbc373e3e7342e7962b87940f9ea94fe0de8e54001df73543c214e8b5d7be3c98f23e107940eea69072c72f48871b36a52ca99386874dcb0056956084817d87e413ffe776d2135ca0b54a281976bc8136ffb93e2c61ab85621cf4331fd7ad4b522b13eeab83d7dd03fbb2b8881035a78ba64c6e87708739e38eccf260c726593aa0e31ceb854205cf65fa454211a3829789ac6a88f4a255694037da81ff09ed91a73fbda70d30cfd070b40675e88db224b0d42b6b23aea7754aed529d07cb15feaf1caa1f5c8bc75f9d8b9fb40a9cfe4ac19d1db274529cff77be5cc15a93be18620806b3b9317880a35e086df9c628feebf7d3262543c0e4b85c3c8e0f6a752d82fdfbc74af76e95b9bebafb86aef4eb053e57475695ace45e0ca4e1e148c035bf74a01f154f724a145cb3cb47529bdfb37aa2cb79f14bbf865357cf603f9d11020be152f2f98355ac3678f24fbee3a19e8980c3541564f1f81323c043ce03590998e447db45e27ffd73fdee4662302b701234b59b7840d69527f346dae55d3d08fff29599947e8fce6ee9816f4bb87af3e1e7b56097672bc4a16dfbcf54e0984e599da5a8e6f91a9670b7c6750f7019f2763d622ec14fe4371722a0f54c194c845979550e4bffdc04656eee0d9426957441186a7443b94102c32af4e62b2d7577b50d539d3ef9baa7915fc939ec433c6be1a7b0e921c82485a3b80385c68d337f75ea8d19f91d0c4cf6958bb9da00cef399274db1ff0c06728239176013dc2ffe99313a4e160e98b165220706abfb3d0996d48d8c521df3463b932e6d79e608ea50b377f8b073b2790bd9aca8514ff80eba0ea46af46c3431b77370f294bda0d8dcc8f4063cac90788c23c16a93afe1e85d99013e1088a593e529d5ad82fa2269808b75a34209b29ec4707a62118a89e69c867ae36594d5252ff36afef630cc7ada57b9c9bc371d75ecbbe4b8518adf518c86fe502d49150eca8f8e74c0619c2ce121c0390bc54a96ef9f32d69dd7c099f2e1e9dd472f8ea9f6c6361467cec679912d9dad7a121e3b47053c9768c2b622e23d01f5f2a739f181135fd3267eeb7c2989b4e1b8f239d88b18a19038ea3e07abe10d3cc06f67f99e949d56ced9afeb9eb883d9795eaa92113643b35f5d9dcd1b4ba58cea1685560d267c9bc4c45d460f498dbe04d3c1524ea98df49578d1ffbe76d8bab9952b0eb699e8161e7fd1f60981599cd88925f2ebb3f91fe67fc3de30241f8ab2200a9c1d6e04092ac86e55897cae51b15a9d0146b070274862ae9c0c4c0566ef028f06f593d1baff228d94c7ee787466bb410b9d214229e298ce55fb9eabcf2dae2f3198adfeb2bbab947836d4614333ad46890bb8d6f0a4ebd1ae6096bd397ae15b728a367a1734dadfbf8c887a7d5bd7fdfc93773581cce2c2a760478d3514a5d6c0a843d59178011110bf87e6e8ef0c3eaaa848886e43407162b98bb776309c2950fa2c0eeda9846e978001ef593c9d73cd688da1317c644df103082dc692ba606dbc061c6ee1d5d553da6ee9e485a4be17b5d76069df01303feec032af872958650a512f5382c9f847ea4c8fd2d8c5e122a44152c217ec726a1d573358a9dffca82c03130cfb167d5c0f6b7236984ad16fbf2574af0568d204291608016ea5a0d895741eea0d514cfe508344b5daa17c9adfa13c2209f83147a36c596ce09becf87f0e13d7e78270ab1ef0a4e77bbe27bc545a1792619c94f112381272ccd8402bb3e06558ebc7545239d63a00422d801fe304988ba2bec17c46066bdf1230fc2cf0fd752cb1985c9cfe1a104a6c321bc37b8dfb271c58539e97bed81432051b083a36bc48cfdf6c52837ac5c23c7b3318f02d03abc46a1e61786ade3688ca4769939ea1080043dddf1ea0b5a8d8b1f6a872f99e853197f7b790dc64db8bbf96402a15aa87e7cb7d59c8a3a1eba1c001e47dace2673ec0d1a328f78850423fbe80b64297219cc6d71023a031acb753710ede6fb6736a99e398a8b5f75d4c1da1df963bc1397463afe24eb7d50dd430f7ee812269b463df500b74293efd4b06b03234c8b85aa1daee3bc9fd0932f6068dd8ac782dfa56aa60a1cf3d7a5708855a442b5863425bd0f21d6dc189c4cc69d986dc2307aeba9964619f3e3c2902d23475b3b4bf97ae2f52896bbe7bd29a533b9a4e332657c480ee583baae93ef89c63b4717a40b7d2b0d08972f9020bc1788e27c110276034a18ecde941b340a497eebd4e6a453786a42aaaeaf2e7390e86c7dae0c9206eeac3ea3e26abd5ca4daf729eec478b168743a8b73f77", &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)="3e88b283eec7592d36e5801ad288ca10fc118c998cecac5852a51751c4eeb50c270d57741485e9b7da195166c36718c12e15fbde97483fecbe0791997d020b3457b6f7a5a03aa4a29da281665c362d950240b075eb7d5b263a5704fb16c32d285574868bcf46") futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001580)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000200)}, {&(0x7f0000000240)=0x2}, {&(0x7f0000000280)=0x2}, {&(0x7f00000002c0)=0x2, 0x2}, {&(0x7f0000000300)=0x2}, {&(0x7f0000000340)=0x1, 0x2}, {&(0x7f0000000380)=0x1, 0x2}, {&(0x7f00000003c0), 0x1}, {&(0x7f0000000400)=0x2}, {&(0x7f0000001480)=0x1, 0x2}, {&(0x7f00000014c0), 0x2}, {&(0x7f0000001500)=0x2, 0x1}, {&(0x7f0000001540)=0x2, 0x1}], 0xd, 0xe, &(0x7f0000001680), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 258.792513][ T26] audit: type=1800 audit(1587664715.578:10): pid=8898 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15822 res=0 17:58:35 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(0x0, r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 17:58:36 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 17:58:36 executing program 1: getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000080)) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x80000, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) connect$llc(r1, &(0x7f0000000140)={0x1a, 0x8, 0x6, 0x9, 0x4, 0x40, @random="5d78f561a909"}, 0x10) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) 17:58:36 executing program 3: socket(0x1, 0x80000, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f0000000380)=""/4096) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000002b000506d25a80648c6356c10324fc00100003000900f000053582c1b0acea8b0900088004021700d1bd", 0x2e}], 0x1}, 0x0) 17:58:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x90204, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0xa2) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000030000002803000000000000980100000000000098010000980100009002000090020000900200009002000090020000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000100000000000000000006000015076083b6ab49353469c92f6f9eeefa0000000000300198010000000000000000000000000000000000000000c000737472696e67000000010000000000000000000000000000000000000001000000006b6d700000000000bb00000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f80270000000000000000000000680043540000000000000000000000000000000000000000000000000000000200000000000000e6e3b6a6aa9afc396300000000007070747000000000000000df4e4d309ec128260000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000615238045e485645e05521e2c200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000fdffffffffffffffe1ff000000000000000000000000000004feffffff56b94f28c04cc9f6995fa04002faf5d9faf84450c6061db3ef0d7b00ad5a6def0000000000000000000000000000000f13bbd53c730161806b3c4470fc89e81e47c29fe0572f3f5f03c8c1a0084fbf74784ad2bb3476305656ac4b25adc59e26cc8cb3d398a6fe69e2cf9111f533d6794bd1083023b3462cd5542f7f292c0c2e22cb803bac340000e8b9033c2f863ca593fc29b6d686ebfa8bdf3571b9ffc8b8f23141b8"], 0x1) r4 = pidfd_getfd(r2, r3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x114de000) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000011c0)) close(r5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 260.179546][ T8981] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 260.239071][ T8981] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 17:58:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x408, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000001c0)={0x4, 0xfff, 0x8, 0x0, 0x8}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x7, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x400c4) [ 260.315904][ T8986] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 260.353776][ T8986] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 17:58:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='#! ./file0 veth0_tk_bond\x00 ve\x00 ve'], 0x22) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000001900000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={0x5, 0x800, 0xffffff7f, 0x7, 0x6, 0x20b, 0x8}) [ 261.557357][ T26] audit: type=1800 audit(1587664718.349:11): pid=8997 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15827 res=0 17:58:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 17:58:38 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x4000810) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$TIOCSTI(r4, 0x5412, 0xd362) r5 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r5, 0x29, 0x19, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r2) 17:58:38 executing program 3: socket(0x1, 0x80000, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 261.849992][ T8962] bond0: (slave bond_slave_0): Releasing backup interface 17:58:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000500)=0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf642, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = dup2(r0, r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000300)) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="f6e85294df9de0f754fc3b56ca04dc33", @ANYRES16=r6, @ANYBLOB="000000000000000000000300000048000180440004d72000b92d9f365006f3cbe901000a00000000000000fc2d0000000000000000ffffac1e0001000005449604167db94f000000000000fe8000000000000080000000008000bb000000dff3f9ebea0c7cdd2c91f5ae38ca0f8a68d726153f63759c9d1755a8215f3a374759a73f16c29c11c65bf934effed075cbb62e53808c6ae2025ad88c020ff99231b324b56597adefecb0da45ed"], 0x5c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x118, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7de6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xd10a) 17:58:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0xfffffffe}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa8002, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='8', 0x1}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) [ 262.319928][ T26] audit: type=1800 audit(1587664719.109:12): pid=9011 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15773 res=0 [ 262.406837][ T26] audit: type=1800 audit(1587664719.199:13): pid=9018 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15750 res=0 17:58:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e20, 0xffff, @private2, 0x3ff}, r0}}, 0x38) sched_setscheduler(0x0, 0x0, 0x0) eventfd2(0x9a7c, 0x800) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r1, r4, 0x0, 0x80001d00c0d0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 17:58:39 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:58:39 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000380)=""/221) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x98, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x98}}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}, 0x60) 17:58:40 executing program 2: pipe(&(0x7f0000000200)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setfsuid(0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000400)=""/200, 0xc8, 0x10102, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f772e2f66696c65302c776f726b6469723d2e2f66696c65315c0000faffffff00"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(0x0) syz_open_procfs(0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44050) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x581280, 0x0) 17:58:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r2 = getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000240)) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000001540)={0x2, 0x0, @private}, &(0x7f0000001580)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') unlinkat(r5, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=""/165, 0x0, 0x1000}) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) syz_mount_image$nfs4(&(0x7f0000000280)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000001480)="edb64ba35d827dd57d330292f8ea4c2f0776ecbbba9668cc0475549470e84a2a952bc986a72d7c455dfca0b7b100083666be4b0540c7d4a11df5074ef9a998f41ecb7459f07bca3a6b4eb0d152235015d27176738ff26180d82de78d5c6c11cb4efcfd0d4c79600952ea9a2bc70dfd5c470a58f9daf9a4420156eb3a85b99337e46e3d", 0x83, 0x9}], 0x80c408, &(0x7f0000000340)=',!self\x00') sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5e, 0x1}) [ 263.492760][ T9144] overlayfs: unrecognized mount option "low./file0" or missing value [ 263.550110][ T9155] overlayfs: unrecognized mount option "low./file0" or missing value 17:58:40 executing program 2: syz_mount_image$ntfs(&(0x7f0000000340)='ntfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fmask={'fmask', 0x2c}}]}) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)) 17:58:40 executing program 3: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 263.966176][ T9234] ntfs: (device loop2): parse_options(): The fmask option requires an argument. 17:58:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[]}}, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='em1procselinux#\xb4-\x00', 0x12, 0x1) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x3, 0x0) [ 264.344143][ T9321] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 264.438583][ T9321] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 264.466323][ T9163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 264.614745][ T9234] ntfs: (device loop2): parse_options(): The fmask option requires an argument. [ 264.661437][ T26] audit: type=1800 audit(1587664721.459:14): pid=9292 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15766 res=0 17:58:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x820, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)="ec1faef83592f82e6766ca9cf40d6e2b", 0x10}], 0x1}, 0x0) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) sendto$l2tp6(r3, &(0x7f0000000600)="537e9d54c3ba5e073018900bf84d437e04ec9d6f3bc1ca9211b313769f22f535cdf6b1cd68f76794588551f85268fd7aa71c94693aa0fab64b6680c5de2ea29f26d6bbb4957af53fd6b9d5dbb93d7c2773072086b67d052d444633530c39c48fd8850d377e700d515b2f31e0b02e4328620442d1d416a621396c9ffbdc1d35ea3c28676873ef03c2b067d2814d828b840195d357f91b3e05a565bb7a304c06827da7284b5679f3dee2028f8f621a1ef7d48becfce40036a1b20bf70ce0353798df146b2d70b256b7ea549f15c0cd943b84c411284f1a1c402ef543d94e1711479e13257398a3db751f5a59f74bbc62099c5cc0aec3", 0xf5, 0x4000000, &(0x7f0000000500)={0xa, 0x0, 0xfffffffe, @mcast1, 0x991c, 0x2}, 0x20) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000003c0)={'filter\x00', 0x0, 0x4, 0x9b, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=""/155}, &(0x7f0000000480)=0x78) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 17:58:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4) listen(r0, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) socket$inet_sctp(0x2, 0x1, 0x84) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000840)=""/112, 0x70, 0xe4fcd63797fc5a5d, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x9, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) [ 264.851947][ T9163] nfs4: Unknown parameter '!self' 17:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 17:58:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000000)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r6, 0x0, 0x10000000000443) [ 266.781553][ T26] audit: type=1800 audit(1587664723.580:15): pid=9367 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15833 res=0 17:58:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e20, 0xffff, @private2, 0x3ff}, r0}}, 0x38) sched_setscheduler(0x0, 0x0, 0x0) eventfd2(0x9a7c, 0x800) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r1, r4, 0x0, 0x80001d00c0d0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 17:58:44 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000006", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[]}}, 0x0) 17:58:44 executing program 3: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:44 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "00000100"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) sendfile(r2, r0, 0x0, 0x6f0a77bd) [ 267.280913][ T9039] syz-executor.5 (9039) used greatest stack depth: 23224 bytes left [ 267.379485][ T9376] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 267.528144][ T9390] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:58:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r2, 0x2, 0x200, 0x2a07, 0x10000}) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000380)=0x1000, &(0x7f00000003c0)=0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb42932dd5ea840d31f982"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}]}, 0x3c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x1, 0x440000) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) fallocate(r5, 0x40, 0x80000000, 0xfffffffffffffffc) 17:58:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:58:45 executing program 3: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = openat(r2, &(0x7f0000000000)='./bus\x00', 0x2000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) sendfile(0xffffffffffffffff, r3, 0x0, 0x2) setns(0xffffffffffffffff, 0x44000000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1cb302, 0x0) ftruncate(r5, 0x200004) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1b8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@empty, @multicast1, 0xff, 0xffffffff, 'bridge0\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0x3, 0x5}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="9ea2242458a3", 0x7, 0xb, [0x1f, 0x9, 0xf, 0x14, 0xf, 0x18, 0x3e, 0x2c, 0xb, 0xc, 0x38, 0x23, 0x20, 0x1f, 0x10, 0x6], 0x0, 0x401, 0xfff}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 'veth0_to_bridge\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x3, 0x8}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50, 'set\x00'}, {{0x2, 0x3, 0x5}, {0x81, 0x6}, {0x0, 0x10000}, 0x7}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x1f, 0x3}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x292, 0xf, [0xa, 0x7, 0x5, 0x1, 0x1f, 0x9, 0x20, 0x32, 0x7, 0x7, 0x3b, 0x1f, 0xc, 0x22, 0x1e, 0x6], 0x2, 0x8, 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000100)) [ 268.921065][ T9434] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:45 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000010003b04fcecff000000000010000000", @ANYRES32=0x0, @ANYBLOB="000000000000010008000a00", @ANYRES32, @ANYBLOB="4c0012800b00010067726574617000003c00028006000e000300000006000e00030000000800150084df0600050009000200000008000700efa1def205000a000000000008001400ff010000"], 0x74}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x9, 0x2, 0x0, 0x40, 0x0, 0xfffffffffffffffc, 0x98000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x9}, 0xa800, 0x0, 0x2, 0x8, 0x9, 0x215, 0x1}, r2, 0xd, r4, 0x1) [ 269.016828][ T9440] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:45 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000012ffc)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, r5, 0x0) dup3(r1, r0, 0x0) 17:58:46 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x1000, 0x0, 0x0, 0x0, 0x5}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') sendfile(r3, r4, 0x0, 0x800009) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000001c0)=0x6e49497f, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwrite64(r5, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0) [ 269.420960][ T9458] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x3, 0x20, 0x9, 0x69, 0x0, 0x9, 0xe0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x12285, 0x8, 0x9, 0x0, 0x2, 0x6, 0x800}, r4, 0x7, 0xffffffffffffffff, 0xa) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x4441, 0x4) r5 = dup(r1) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 269.778928][ T9464] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 269.811290][ T26] audit: type=1800 audit(1587664726.600:16): pid=9456 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15754 res=0 [ 269.941952][ T9467] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 270.043860][ T9466] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x6}], 0xfffffffffffffd83) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80), 0x400000000000328, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) prlimit64(r3, 0xd, &(0x7f0000000000)={0x1f, 0x5}, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 17:58:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 17:58:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074700000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000e1ff000000000000000000000000000004feffffff"], 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x9, 0x1, 0x4, 0x1, 0x9, {0x0, 0xea60}, {0x5, 0x8, 0x1f, 0x6c, 0x2, 0x3, "04ec7036"}, 0x80, 0x1, @planes=&(0x7f0000000040)={0x15ea, 0xffff, @userptr=0xfffffffffffffffc, 0xf614d61d}, 0x3, 0x0, r0}) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40100000000000071101c0000000000c600000000000000950000000000000032b729ac3a1376aec6348537779669b7e49b005b8a7e9cadef8a2343ec4d66ccd411b150e903a2d63b24da235c7f37b5e6624dbcd2f1e1e83d046c8d64e390c6efb1114947dc21017554cef4bb2fbca04bbae8cb90f7c3ade11b2b8cf5a17aaf114845b37964b315ab"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000000c0)={0x80000001, r4}) 17:58:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000019c0)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x4e}, 0x3f, 0x7, 0x31e3, 0x100, 0x28, 'syz1\x00', "3785ab75a18f1a9956b533e9349ef2ab5d46a918f72ec3b9ae33ef0cba1eab3f", "3980cff2098900a021d85966bd15a55bb788ce8bb41f9e0e7f9723660f42f3b1", [{0x92c, 0xe7f, {0x2, 0xcc}}, {0x8000, 0x79a, {0x0, 0x80}}, {0x0, 0x401, {0x3, 0x81}}, {0xfffc, 0x7, {0x0, 0x3f}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x0, 0x0, {0x0, 0x1}}, {0x7, 0x7f, {0x1, 0x9}}, {0x1, 0x3, {0x2, 0x3f}}, {0xfff9, 0x1ff, {0x3, 0x7}}, {0x1, 0x1, {0x3, 0x100}}, {0x8000, 0x3ff, {0x3, 0x9}}, {0x1000, 0x1f, {0x3, 0x5}}, {0x4, 0x0, {0x3, 0x80000000}}, {0x8, 0x7, {0x2, 0x7f}}, {0x5}, {0x4, 0x9, {0x3, 0x1f}}, {0xffff, 0x401, {0x3, 0x20}}, {0x0, 0x8, {0x2, 0x4f4}}, {0xfffd, 0xfffa, {0x3, 0x9}}, {0x400, 0x3, {0x2, 0x8e}}, {0x1, 0x6, {0x2}}, {0x401, 0x100, {0x0, 0x80000000}}, {0x6, 0x1ff, {0x3, 0x3}}, {0x1f, 0x3, {0x0, 0x2}}, {0x8f, 0x8000, {0x2}}, {0x8, 0x1000, {0x2, 0x20}}, {0x4, 0xffff, {0x0, 0x1f}}, {0x47, 0x5, {0x2, 0x20}}, {0x8, 0x1, {0x2, 0x8}}, {0x8000, 0x101, {0x3, 0xa1c}}, {0x5, 0x7, {0x7aee66627003b560, 0x6}}, {0x3, 0x7f, {0xc6459c24f95d0451}}, {0xf066, 0x5474, {0x0, 0xf3e}}, {0x6, 0x7f, {0x0, 0xc6}}, {0x5, 0x6, {0x3, 0x8}}, {0x9102, 0x318, {0x3, 0x1ff}}, {0x3, 0x0, {0x2, 0xfffffffd}}, {0xf442, 0xf1, {0x2, 0x4}}, {0x2, 0xf800, {0x0, 0xffffc28c}}, {0x3ff, 0x400, {0x2, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}], 0x9) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0x8) ioctl$sock_bt_hci(r6, 0x800448d7, &(0x7f0000000200)="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") ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4f, 0x7, &(0x7f0000000000)=0x3ff}) 17:58:47 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)={0x1, [0x0]}) r1 = socket$key(0xf, 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=\x00/rus,workdir=./file1,upperdir=./file0']) creat(&(0x7f00000001c0)='./bus/file0\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) 17:58:47 executing program 3: socket(0x0, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 270.501320][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 270.515721][ T9483] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 270.536485][ T9481] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 270.713729][ T9496] overlayfs: unrecognized mount option "lowerdir=" or missing value 17:58:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x6, 0x40000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r4, r6, 0x0, 0x94f) renameat2(r5, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c3f645076fec532dd6a2b895c6367"], 0xda00) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) 17:58:47 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x0, 0x0) poll(&(0x7f00000008c0)=[{r1}], 0x1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000080)=r0, 0x1d7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x4}, 0x400b}) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80, 0x0}, 0x0) [ 270.950672][ T9483] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 270.999474][ T26] audit: type=1800 audit(1587664727.790:17): pid=9494 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15874 res=0 17:58:47 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {&(0x7f0000000a00)=""/59, 0x3b}], 0x3}}], 0x1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x1d, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x800, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0xffffffffffffff92) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 271.128163][ T9511] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 17:58:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0x0) [ 271.301534][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:58:48 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="550000001800", 0x6}], 0x1}, 0x0) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001400)=@assoc_id=r3, &(0x7f0000001440)=0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="20000000000000008400000008000000fe88000000000000000000000000010120000000000000008400000008000000fe80000000000000000000000000001530000000000000008400000001000000050008000a0000000004000080000000040000000500000009000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac1414aa0000000018000000000000008400000005000000200000000100000020000000000000008400000008000000fc020000000000000000000000000000300000000000000084000000010000000700b40000800000050000000300000001000000ffff000003000000", @ANYRES32=r4, @ANYBLOB="1800000000000000840000002600000030000000ff7f00001800fb3d00000000840000000000000002000104040005fb"], 0x120}, 0x1) close(r1) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x135440, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0x0, 0x4, 0x0, 0x9, 0x8, 0x6, 0x0, 0x7}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r6, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000042", 0x5) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 17:58:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611570000000000095000010000000001a5127e092e44fe7179201de8b95774c8196b409d87570fc9e2c009efed3d0518974a27d00e1c9a1664883e88c4afc6864bb761d4ffe1c26ce3ff05c104296d24c79631225c95d2d8832f33f07740f1c1dfb4f8e41bb0deed83a29bf8b47ec56dad4d1543dd9a0d03d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x100}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78) [ 271.596126][ T9530] mmap: syz-executor.1 (9530) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 17:58:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}}, 0x0) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000240)=""/4096) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x210100, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0xffb80d371405250}) 17:58:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611220230000000095000005000000008ff020aa6ed7acecd274aea7dbd94c050d4082a1b16ea139f08392c8972eb42decb28b039986758d0ae0d7e57c1f15c22efcff42bf801f4a2d"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/174, 0xae) 17:58:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) msgctl$IPC_SET(0x0, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = semget$private(0x0, 0x2, 0x40) semctl$SEM_STAT(r4, 0x3, 0x12, &(0x7f00000001c0)=""/224) semctl$GETVAL(r4, 0x1, 0xc, &(0x7f00000000c0)=""/64) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth0_to_hsr\x00', 0x10) 17:58:48 executing program 3: socket(0x0, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:48 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000200)=0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x10a6}], 0x2, 0x0, 0x0, 0x0) 17:58:49 executing program 1: socket(0x0, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 272.327811][ T9556] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:49 executing program 5: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x5466, 0x4, 0x20, 0x3}, {0x8001, 0xd8, 0xc, 0xc01f}, {0x2, 0x40, 0x6, 0xfffffb3d}, {0x7, 0x6, 0xe6, 0x3}, {0x5, 0x7f, 0x7, 0x4}, {0x707, 0x6, 0xff}, {0x200, 0xff, 0x7, 0x75a7}, {0xffff, 0x1, 0x25, 0x81}, {0x9, 0x2, 0x7, 0x1000}]}) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0xf8, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x3e}, 0x2000, 0x48ad62ed, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x800, 0x9, 0x2}) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @local}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xaa000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040), 0x0) ftruncate(r2, 0x200004) [ 272.873776][ T26] audit: type=1800 audit(1587664729.661:18): pid=9577 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15880 res=0 17:58:49 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000dfe3d11d55c06675edb5d1be0000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800004726"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c00020018000200030000000001000000001e000800000000000000ce204b70759690626033cefc9f29f0a316c47d6335ffa3a711759f0cc96a64a78d1424d7fbb9ce04556e206ac506b1011a61efc33a09ebbb2af603af78d8b1c564eebfed008c914bfbadcd782389f49d356138458f10539554386cdc1a5949ec127445ab7ec5cb7e75d4565ff6b5bcfa2e670c666d929fd82579b295"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x3c, 0x1, [@m_xt={0x38, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) [ 273.031630][ T9579] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 273.301711][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 273.368286][ T9586] HTB: quantum of class FFFF0000 is small. Consider r2q change. 17:58:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x224) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530ec1d40052dfac928aaae701426ce554f80519c2debc167c6724f5ee75273661c07a661e6c39999c6ee446872671668867a90c472de883745388497e8525adc0e5c3dcde62bd0de47142000fe1e3a4df2ab949613437b250407725201515434e3fccbd57ec04ecc"]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 273.646600][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 17:58:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x81, 0x1, 0x1, 0x0, 0xb70, 0x30824, 0x16, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp, 0x1128, 0x6, 0x7, 0x1, 0x3ff, 0x800, 0x40}, r0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 17:58:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x1000) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 273.908611][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 273.972488][ T9599] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:50 executing program 3: socket(0x0, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:50 executing program 2: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x368267fbdc0334dc, @host}, 0x10) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='ext4\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0xffffffab, 0x0, 0x0, 0x0) [ 274.161541][ T9601] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000140)=0x78) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xc}, 0x5}}, 0x7f, 0x4, 0x6, 0x5, 0x20, 0x752c, 0x1}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r6, 0x8, 0x6, 0x5, 0x0, 0x200}, 0x14) sendfile(r0, r1, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, r1, 0x0) syz_mount_image$cifs(&(0x7f00000000c0)='cifs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0xc8409, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) [ 274.207022][ T2661] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.222410][ T9602] EXT4-fs (loop4): unable to read superblock 17:58:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x0, "2e226e03ba1989473714946994989f2d504eec9388470efb97ae7d3d13a1b3e6"}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc6d0}], 0x2c) 17:58:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd39672f6513b060e}, {}, {0x4, 0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x74}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@ipv4={[], [], @multicast1}, 0x64, r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="66b98b0400000f32bad10466b84f71f06866ef660fc5ed00362e0f01c40fc76fd90f01c8baa000ed660f3a144db40f0f4100660fe20e64ae", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) [ 274.594505][ T9624] kvm: emulating exchange as write 17:58:57 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18027}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 17:58:57 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="170cf7a43c6c44000011882f"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:58:57 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4814}, 0x850) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1401, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0xc4) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r1 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x800) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x20244}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback=0x7f000002}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x74}}, 0x0) 17:58:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000140)={'team0\x00', 0x3}) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000000)={0xaebb, 0x1b, [{0xf, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0xa}, {0xc, 0x1}, {0x3, 0x1}, {0x8}, {0x0, 0x1}, {0x6}, {0xb}, {0xf, 0x1}, {0x5}, {}, {0xc}, {0xe}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x7}, {0xd, 0x1}, {0xf, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0xb}, {0x0, 0x1}, {0x2}]}) 17:58:57 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x401, 0x638442) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000300)=""/47) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d", 0x1d8, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x8355bcedc9d6b37d}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="740000002c00b340274422aaf9c1f3ffff9a5500", @ANYRES32=r6, @ANYBLOB="0e06000000000000040008000c0001007463696e6465780044000200400006003c000100"/92], 0x74}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x34}}, 0x2000c010) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0xc24}, [@map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x5, 0x6, 0x6, 0xfffffffffffffffe, 0xb}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:58:57 executing program 3: socket(0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:58:57 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x806}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000940)="08000000000000003759540d01ab34080020ce89f347f85954148506ada508304f9a7207aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357ad5c74e053c0ba88cdce1e39acd20000e5ee5b1de0dd94615c", 0x79, r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'rmd320\x00'}}) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x100) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000010a010200000000000000000200fffe0900010073797a30000000001c000480080002400000000008000140000000000800034040ff94a60900030073797a320000000034000000000a03000000000000000000020000000c00044000000000000000020900010073797a3000000000080002400000000114000000020a0101000000000000000000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) fallocate(r4, 0x0, 0x8003, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000000c0)=0x3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x10, 0x0, 0x0, 0xffffffffffffffff}) [ 280.676454][ T26] audit: type=1804 audit(1587664737.462:19): pid=9661 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir431162277/syzkaller.5yn78U/18/cgroup.controllers" dev="sda1" ino=15897 res=1 [ 280.683966][ T9663] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 280.740906][ T9646] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:57 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7}, 0x7) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 280.835184][ T9663] device gretap0 entered promiscuous mode [ 280.926180][ T9673] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:58:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x45c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x8) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32], 0x2}}, 0x0) r3 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 17:58:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x7ffffd, 0x101010, 0xffffffffffffffff, 0xffffa000) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) unlink(&(0x7f0000000000)='./file0\x00') ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f00000000c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x5, 0x4, 0xfff, 0x9, '\x00', 0x100}, 0x6, 0x30, 0xad, 0x0, 0x3, 0x7f, 'syz1\x00', &(0x7f0000000240)=['ramfs\x00', '\x00', 'ramfs\x00'], 0xd, [], [0x4dd7, 0xfffc, 0x6]}) 17:58:58 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x24000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x5, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 281.364347][ T26] audit: type=1804 audit(1587664738.152:20): pid=9646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir431162277/syzkaller.5yn78U/18/cgroup.controllers" dev="sda1" ino=15897 res=1 17:58:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x208040, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000200)=0x8, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f0000010000000000000000000000000000000000000000000000000000000052658970b3e0d7470ac39c2227fc3ab105f98368b3349379d19b9054452434da9d8c1b4259e748fc31651c0f8c37df16f717072a8dba522168c688", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000000000000032000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x40000) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000240)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 17:58:58 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000000)=""/248, 0xf8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x280240, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/239) [ 281.842897][ T26] audit: type=1800 audit(1587664738.632:21): pid=9696 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15893 res=0 [ 281.851275][ T9708] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. 17:58:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x88, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x4, 0x2}, 0x2c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) [ 281.900267][ T9710] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 281.966172][ T9708] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. [ 281.985068][ T9712] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0xff, 0xb, 0x4, 0x0, 0xfffffff7, {}, {0x1, 0xe, 0x0, 0x3, 0x1f, 0x7, "d4ae2349"}, 0x3, 0x1, @offset=0x10001, 0x10001, 0x0, r3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44045) ioctl$KDADDIO(r0, 0x400455c8, 0x2) fgetxattr(r2, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', &(0x7f0000000180)=""/75, 0x4b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r0) 17:58:58 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8a082e, &(0x7f0000000080)={[{@init_itable='init_itable'}]}) [ 282.081584][ T9714] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:59 executing program 3: socket(0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 282.366001][ T9791] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 282.738306][ T9797] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:58:59 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)={0x1, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) [ 282.857802][ T9765] EXT4-fs (sda1): re-mounted. Opts: init_itable, [ 282.930197][ T9714] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 282.981862][ T9872] EXT4-fs (sda1): re-mounted. Opts: init_itable, 17:59:00 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x806}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000940)="08000000000000003759540d01ab34080020ce89f347f85954148506ada508304f9a7207aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357ad5c74e053c0ba88cdce1e39acd20000e5ee5b1de0dd94615c", 0x79, r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'rmd320\x00'}}) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x100) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000010a010200000000000000000200fffe0900010073797a30000000001c000480080002400000000008000140000000000800034040ff94a60900030073797a320000000034000000000a03000000000000000000020000000c00044000000000000000020900010073797a3000000000080002400000000114000000020a0101000000000000000000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) fallocate(r4, 0x0, 0x8003, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000000c0)=0x3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x10, 0x0, 0x0, 0xffffffffffffffff}) 17:59:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) ptrace$cont(0x7, r2, 0x100000000, 0xfdb5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd1fffffff00004000632f77", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 283.879436][ T26] audit: type=1800 audit(1587664740.672:22): pid=9675 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15905 res=0 [ 283.953018][ T26] audit: type=1800 audit(1587664740.692:23): pid=9704 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15905 res=0 17:59:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x88, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x4, 0x2}, 0x2c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) [ 284.251196][ T26] audit: type=1804 audit(1587664741.042:24): pid=9692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir605394084/syzkaller.9FqYOX/32/file0/bus" dev="ramfs" ino=40031 res=1 [ 284.324796][T10010] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 284.639905][ T26] audit: type=1804 audit(1587664741.433:25): pid=9692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir605394084/syzkaller.9FqYOX/32/file0/bus" dev="ramfs" ino=40031 res=1 [ 284.853447][ T26] audit: type=1804 audit(1587664741.643:26): pid=9692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir605394084/syzkaller.9FqYOX/32/file0/file0/bus" dev="ramfs" ino=39287 res=1 [ 284.971691][ T26] audit: type=1804 audit(1587664741.763:27): pid=9692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir605394084/syzkaller.9FqYOX/32/file0/file0/bus" dev="ramfs" ino=39287 res=1 17:59:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) pwritev(r0, &(0x7f0000000000), 0x0, 0xfffffffffffff482) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x94, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 17:59:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40048, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000002200)="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", 0x1d8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000240)) 17:59:02 executing program 3: socket(0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:02 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x806}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000940)="08000000000000003759540d01ab34080020ce89f347f85954148506ada508304f9a7207aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357ad5c74e053c0ba88cdce1e39acd20000e5ee5b1de0dd94615c", 0x79, r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'rmd320\x00'}}) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x100) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000010a010200000000000000000200fffe0900010073797a30000000001c000480080002400000000008000140000000000800034040ff94a60900030073797a320000000034000000000a03000000000000000000020000000c00044000000000000000020900010073797a3000000000080002400000000114000000020a0101000000000000000000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) fallocate(r4, 0x0, 0x8003, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000000c0)=0x3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x10, 0x0, 0x0, 0xffffffffffffffff}) 17:59:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getegid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x20100, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000004c0)={0x9b0000, 0x1, 0x6, r4, 0x0, &(0x7f0000000480)={0x990967, 0x0, [], @ptr=0x8}}) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) io_submit(0x0, 0x5, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f00000000c0)="6dab6a52cd4370a8e4f0d985281ebd7b56063437246bb25c6a14bcc3b4c6079244cfddc8e33b863029fb1c838617f6217365b3f6df260f9032fbc79bb6521c87bc333334cc2e2fc6f91089b4", 0x4c, 0x2, 0x0, 0x2, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000dc0)="77ba6d4c001eae9282d70ccccf0be832dd0de07bce62eb4c9a9adb8abbe7f195dfd5dc8704fa089abdd1cbbfc6346b5c1900b707cee5be204b321563258428c4ace0481e245f6179aade196b22afe9869a8285c865c8d3db3ba9777e60bdfea44b2456136cb7e3842c1a4e545db078598a8ff1e30e64897e222491a3d37154598a6eb6275a2695f419431a8b8db79935c7e2885ba4d8e76b6adb8a7c5c13cccbde08b5fb00de4d59ea516efe1dd1eb5bc326623d7f701adb75facd2140fc1379b12d55b582ec1c8a5ae1c7225da9aac78fe0c2040d5baf3e0b009e20c2d9025e34d724b9f5d38f1e0cf8be6e59adf8ae536515ead86bab0a65f14fb0f6b1a785419f2060bb7ed14d6d4f721242f3a0876b5cd362f5fcef7989353aebe12ef6c04c87e7f8a726922f1e6bba72ac1e607fed91477d868efb8a916c58b57346669bbbabe9d9d827da83b93b9014cc4d7861d92df94ff13aba6a244d2b4f5074f993dc07277d002752eda8a32a4066e682a55a3b27117bde9fb1a81ff957f1eebfbda053106af7aaa665334d172b0230162d8ef4407c9ce10819ce3523826124df6cd06e75d6b77c9ec52fb0b806b1f39a5791da70bcf7199354ff80b7b7431bb61034fcd7562e5bfd0cc8bad9df4f1762b803a2a23de3ffae16e8700b0b313d2aac14fd8b2d57da9f1fe7f0f178a6eaf7bfda8ade59f1193e427b760c7a310d7300409735f3b2bca6313b8fed6b347cc99da7b404d3579ba5e0de9f4b3aadf845bc0e288f0796c22b1f408245c4a0b04158f17dd743b85de39c67fe4ed9ca03af8d5dbf020efa67c30aa06803e9d0a05674dcf43978bedb50fa3388484fb8591cf01b4679fa6d9fcd3c423019fb5b38a6d7a0bc83f5dfeb73ec88842ee628577c627a37c32c0b83785d8273dfc08c5d4ad9bd575bde50b6caf19849b03caf2bf5c20dd61265dcfd5ab2f7e8a146324aab79ef5637da9f8b58d96fa72f19c3b098e67be8eedc74db9dc06e4ed41568bb7441a025dfe5bbb8d91f31595dad50a371ec26b9cafd6479f4c85a03fc99c2ca72f18e9d5930053f4509fb716c4d8b73b6d6c79085de373e722994ea752a4c1c693727a2d4b463cd971c2c08b02d6747f67acbfd6a87bf7325ffc2a6c2a9e357c0d59cd12d9c6346003720dfa3079da20f752f1636cc16477cef95256da786c3b202f373a9db7aa67229fcef19f99b78269714fc55f4f78f28be49a69a8a4358e0884cefa86ef75d1956717d1cfb2951f9f25f87b52a1b711a915843f6db0488d769f3c2b449ba070e0ac9db295206f2f80585a73033062a3a832c295d7d8a288cceef0726039f96677fff2338f1ba2bdd878116d33701f179007c99e796ff4655f322a3f969bb148c46e068a6c60327781494b18fd78f611d0d6c488460dd66d0ffe0663666de6c92c3fe7d855dbea2374360047311aca30575bab3771e4026ca47b0384d7df7cb9272a94ba1b846032d9d34fef9030f61d960d606e8ff45c900f91d6d3b4d876e8a0d70ceb1f3e60d03d5d328fe85770265e728115749f29562e9000e6f27e55489f866a19f9eb5fac3f29a28665c9821d7adb8e95a4e756415cd4c19d0ad909c70075e95e047838815efb1dcf73f30227d5ad9b641bcab6aaaea6f36ca6d88ff0d8290a61cc1deb3163428f6d0aeb17d11ae73ccc5faf25d67d4fabe20ee0f57256e0b747915d6a718a715680194a36cd2aab0191f932a61037d44040bb22375de0285aa7f0fed7ba8d02ae5cf05ed34710fbabf2832234e01366cf090df8e5952b6561c85348bd329ded6f3cb1363391e8aac9fc3b8a7691b269997de139d057c741ce9cd3bcfd90d462f9e14c159958c01c17e600a73bb44cec213e3b4bbe9800ab934b338a3b7b626b3e86a9fc67c37e4106c6774be59ff92722c5804c4bd0c6159945ee3bda86b2a7986eca765587e1ee2dbccecbb1f31ea956fddca292f3d04b66917c2966bdfe1cbb7a19021b59c32ad213ec49f445eb2c0df795a85315a9d397cbedf5fbae0da00a603e0b505eea2a7fd4ea28590b509a7d2d14a5423a70d9d8cc5607218f57bd150b3177e38166f14a6ffbc6eb7306497bed7f8f2bdc24327cc1548e523536205fa2f27243e0636467b858498c5e59c92de2f890dfb3e3beae3112f251b5486de9c23960ac8dd7fdfb399105d17a218e5fdf76ba9cbb81eaee4917de485f19d3d6dcfe0041705f90e0380cc8224cc2fe92908d0d6e6dc6c6967446431ecd0d97f52ea7215d8f7ed533e94909f74b7978dea4e490b5940366296ca2516f69d6096e63d04a7c933c615d1b39f0a87ef1c62c604e472f7cb2769849313efe9bc65e98e72ec2b0390140a9e695c8c9665fd4e060529ffacc20c005e1424d2a21931dabf64f05deb1982ae91c6b074c1a4e0e86fcde8353ffd5544479c049c48834f320e2f696c2cd15ff6f8db3bc488e64295a1fd43b3ee3f7404f5ed834484a6e2418ffd081b6f179cfa6888c0b38f0dc398d067b72632c096dd623d6437aefa0e93638de0071ea9b108b0de048c8cf04e45fe8b33ee3037e9f458c970b775bfb781e7929bd87c756838cd77bbdfe70336a14820f255e2198ba48e136e482bf5f615b92ef60448f5962b929a67b333233cc90f3278cc688f4d0ad9731f64c9528d8a59fdb2822ae4ecd6254e728f311d37f774f9db0a243d4fb0e20d827817ce1fbb77885d7afff98ca6ca8e07ce33b77f79cc432dd6ac0e4a48bdd70c1342bd19e5b9a5cca63690d37968d2d37ed2348b5e32c428ae694c72170d748458e0ec1e66d5163341b35ddf3011345723ce3319be0fd85899a93088c80eba71a7a369b2f936321ef84f21ec9542b98cc7a33667c1baea8339760d5018b848e77b946a0e6a9cb11cbc15d568942b05c2f5ecb8a2e164aee104ae2c473ece10501d8108c19ff816096b049f4b8ff3143827e8da567659e084589bc09d344d165dde33490930d07044315c195f072a12ab332ec788d544433bf14283e0793dc1bf8307b901d8eda63d41aae76f01a4e9d03706e1388b81c4a77e3b4993d067a332f780ce5aa4c655fdf2101e4b5330af8fa74546b748c3485e43566b62f4ea2ec0f39e0d37d2633f5806cd996189dd4e7780cad94a033403b025e66cf26a448ee8ca1b32ca719c376bf2e1306144caad7e0b48fc4fe46bb9892b0cdbc764c4242340e0341ca830fc035c29bd3b26316a47080da1b8b8ff5f31cbbb5c224aaa678c2fe0d4112725aa476e52f8bce1df69bca91f74537d3784e75bba6a1ab0302fa20b793ceab010ce1a0dd60e233f190ad4d904c39d639c3cc9f8aa79a3407d7759bcceca1be67361fcf47037ba05bd0dcaececf6e2d998889776f1f3f6c2448e495a2d3c5aec62254a5a9bf48c9057414d4c7456fe006420956d7893dbc8ca14a146f6bd63201d1c9c23f4a481604822821afab770a3c5b9aae00b9bc2d9669ef8ba9d3c5b7177b94ca639ec97f48e52e2f317dad64704dc0bc1951aa43bfcfdb240d25864a400e686db0ad34318b9b61d1ae7522a3f6b7741902f31e043514d2695d968b7c66dc8338824988191f2cbf257f85faee9eb5ed2af6a7406f9fe3e7e8ac52686725dcb05675b8fd68a1d7ee65e646b3243eb4e59b1bbc510c95663c29c953edb28946bc69ab99a9b2be48853713f92fbfa886868c43e5ed631fa8ab17842b6bdd495bb35191a960ee6fa0a3efcf2368bd5d0f79b7201c150734ea4895e57fa617e8bb444ac4b5a8721c707843613cf1dbf9a442af986e2325ba1a85ecf5436f5f7166e8b9a0cc423cfdd023c89204d34bd00a27538e491d9ce77a501b56303e7401309ea07f96ba2ecec12d226822511a0b4b3ab8e2a1a66d4b54ed5e9ac18b3c3ee421eb6a8051c4824cd34b9220be3e569a865c1249da3aabbecad9ee942f7f194686951ae7b8411f3e1f46bdc91b17b0ecb0b89f4868c6bc0b2bf91643032112844649f49cbfde34875be49641029bb750ef1ecd44efa1a19054801902fddce7b57403ae11c09da76d46f0b99e42246e11d96d27680fe5f5007c933a65c3a2cf68cc592817a85089c4192be19fa6ebc33c686f1753ce1b84e86391ed1045db1801865ed6bbda330dd0a4da9d3aa7799037210ff16650ab8516a13fd73fe802d8eb5510107aa224b6575826292f29a9233e0673513b004a04636bf0b543c33a81efd97e56f9e9796dc4192edac46dd7fc8aa80dcfaef2de77b356dff63dd1274c6ff0d4682b7aabe16039a4a40ab1918e483af964983cde75dc6142a76852b010206cb5966a5feeccd3e06a85559e5bcaa3f4975ec7155ebb0eb9c92a8380228355b7244758c7b1bbea2a5d66c3a7736ee3405fabaed06fae1fbb591a2c8b42aa2fbe9fbbf1767b3d036203054bb6e4846bde8706cc2605a289c6a497350ab900f15a6ba6bf711f02b435ec1935446268ac83b2f06887383461bcc58e5a06dcc87392ee2804cc7fe3734e49d8a04484800d9ca20b37b87f9939fa7e3e7aed20b04c90dc999b191ee40a5db538f6ef80896f679905fdedb1cd617eec41950c62f4d69f981cc2196feaa8433b241e011049fb96f98a6bf12e53a659feae70dc468340d56cc368111f5ef006c80cf809dacb8f1f89429b5124b6675d2ef8035a32f866f1ebc5b6c53aaea9a503478aa432ca4783eb0ea3f737592cef46aab3c9af8c6954642e08f5d41fe82111eb8bad8b6dce0ea9c5edb61316a938b52ef1ffe66790ceaaeffd6362bc815b4d79c86ae1dd207bd0e9963c223a07ed409724cac03b1af0e96ecf0d3533c1d0847da25ccba5b1a9e9a41f863d1a3ead4c2f2c5666f6aef6885fa036cbcf9056430680e5be2db782503317b66e0047f3675cd68d3c3a04114ac3dbc56fece03ab40c80af5b4299a9c83499711e1f509d981b0ca9aee945b88fb0ae5e7785e69d508bf870cfaf6d45a6fbeaddae484e4a305b69e91911d05a7da5649efeff0880f72945fa6c7db450c6d314139635f02fddf7e4fae2b620af2003f4c0077c1e8d865e11ac7d70feda5316c5f0c99e1a9a5a470ab5261293b5ead4e82d550b624bba0b089bc62a3467240320e76d9776b8174fcca2e9fb6e9276d530999773404decbfe0837e2e928a33432ccbe93f1dc402b5dc887b1239e6024b3984f8f61a6262a6357085643fb25fb0742dc843ed8afb07fdd4e0115ce5f1426bc14217449c140fd69fc54a370e9227201fd4db7ae9607f81d39fddec574e51a982e371724b08a303cb1198088b2806e9e177e9b384c1e91739a04c9cf54077b5b883c2554cb6cd5f6f025b7d08a8f837e692d932ac1bba92c54933425b6dbbb85ac121969822e0afee7926be7265a55de43838f976bf721676bab91e80ea61fc32f7a083b568d4e77574522db9b52df1b68d68eb0adf1b5a84a1540096f7253035eb71e155be68482aff21b99d4056c616710b6560ea3ae74f2f070fa12a9c2430465d9e3ec51f59a76e790af7e5122665500ed07f45e01a138be5207e4fea08577a82d4210b8d6a0f42c29614e4b63270de15d5510d266fd50ceec8a3d068a6584da0650f7676b57932ae1006bbef087ee7eb5009cb060fccf75618e1ee9f9a82dc5636c85338da73b0c049cd30e48dcbbceb5eb2d22d6dc3f62c98f1e9e7142f1539ba47f27445d2ef61f686a9600de2d2c27fa17be323b655a141f568592f03a6232f85a2aca040f2f0c5a28e7562266b0914fdf4f96ddc287d37f936317abdc11863ad83401171b94452d6c583e30a52584e1bc0757e866", 0x1000, 0xffffffffffffff18, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xd73d, 0xffffffffffffffff, &(0x7f0000000280)="4bae89854ebedb1c0c0b4294632729219fa4fd156e5734ab4cd5121d8bc6ca15d7d565f0c32a8bddfc726c178202f724f7ce929f809adc0dd683341143dae00c28826c56b5471282dec4b8c612", 0x4d, 0x8, 0x0, 0x2, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x60, r1, &(0x7f0000000380)="d1621b1bcaa1ee87d75a4fce142cf40aa4c4bb594c503b078e3d4bf7b742e2a9f7232098a1d690fb8fbbbc481112691a552d34ad9b7f5986700c4537522bee82b8af203ca933bee8fc1438edbceff36fce156b0f0be31652220efed63b3e689d1302fd2a3ffcde8415d4956a3a6b4ad5ac3694b993a36d6bc5584f4a9cd1ccafc8e5f0a68f9ad6581c539d1277775f42c008fffeeed36b96379646d69ba3db2989ad8e093f5e5c69b01ffe290524ce6c0e71788d809a70591493e61a8df63d64941c53424377ab4d35f4e6f4", 0xcc, 0x5, 0x0, 0x77b667dca087c73e, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000540)="e9551d4b5c166060b5de6c0ef8b1ece81b9c8a4b9da778fcda11767d09928321a192fac1c38bdf0fe83626df25b5c4b6e41daecb8f10d3e5d9ab9ef1e0dba0736d709c333d2256b18a8d544e820b33ab2088e3bbcbb9fc05e6970184580a38ce19f0fb580828cefc5769", 0x6a, 0x7f, 0x0, 0x2, r7}]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) fcntl$getflags(r8, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:59:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffffffff, 0x71, 0x10, 0x18}, [@alu={0x4, 0x1, 0xa, 0xb, 0x5, 0x30, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x78) [ 285.469601][T10153] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 285.728131][T10153] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:59:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [0x0, 0x0, 0x0, 0x30], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x204800, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000740)={@private, @private, 0x0}, &(0x7f00000019c0)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001a00)={@empty, r1}, 0x14) [ 285.843893][T10167] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:59:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xfb7, 0x42002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='/dev/input/event#\x00', 0xffffffffffffffff) keyctl$instantiate(0xc, r2, &(0x7f00000001c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '/dev/input/event#\x00'}, 0x28, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 17:59:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRES64=r2, @ANYBLOB="16b84dc37215a8ff82c5752a1ebfc11c99dbe1331e3e7ca42fdc19edc6960fb7a58740dd9d4d50bad1bc00", @ANYRESOCT=r3], @ANYPTR64, @ANYBLOB="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"], @ANYRES32=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 17:59:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8200, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000340)={{0xa, 0x1, 0xdd, 0x100, 'syz0\x00', 0x1}, 0x1, [0x0, 0xb, 0x1, 0xfe, 0x4, 0x20000000, 0x8, 0x3, 0x0, 0x5, 0x9, 0x7fff, 0x4, 0x3f, 0x4, 0xcfc, 0x3, 0x401, 0x101, 0x4, 0xea, 0x6b5602f3, 0x6, 0x7, 0x8, 0x5, 0x8, 0x96, 0x3, 0xc193, 0x1, 0x0, 0x80000000, 0x9, 0x8, 0x8, 0xea17, 0x400, 0x6, 0x4, 0x100, 0xfffffffeffffffff, 0x81, 0x12000, 0x1000, 0xffffffff, 0x5, 0x57, 0x3, 0x0, 0x5, 0x1ff, 0x9, 0xd, 0x3f, 0x2, 0x4, 0x1, 0x800, 0x550, 0x0, 0xffffffffffff8000, 0xfbf8, 0xb6, 0xf9, 0x5, 0xb27, 0x1, 0x3, 0xc6, 0x10001, 0x5, 0x1, 0x9b, 0x2, 0x6, 0x2, 0x0, 0x7, 0x40, 0x0, 0x4, 0x46, 0xf193ff7, 0xfffffffffffffff9, 0x146dfaee, 0x4, 0x7f, 0x3, 0xfffffffffffffffd, 0x7fffffff, 0xa679, 0x4, 0x9, 0x3, 0x5, 0x200000000000000, 0x8, 0x5, 0xffffffffffff8000, 0x4, 0xd9, 0x100000000, 0x9, 0x5ca3, 0xf54, 0x9, 0x6, 0x8, 0x126d, 0x4, 0x101, 0xff58, 0x8, 0x800, 0x3, 0x4, 0x89e6, 0x7ff, 0x10000, 0x5, 0xf49, 0x7, 0x7fff, 0x7fff, 0x8, 0x284893ac, 0x1]}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100005071000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x3c}}, 0x0) [ 286.162515][T10179] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 286.226713][T10180] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 286.268365][T10164] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 286.278359][T10178] [ 286.280889][T10178] ======================================================== [ 286.288157][T10178] WARNING: possible irq lock inversion dependency detected [ 286.295364][T10178] 5.7.0-rc1-next-20200415-syzkaller #0 Not tainted [ 286.301860][T10178] -------------------------------------------------------- [ 286.309067][T10178] syz-executor.4/10178 just changed the state of lock: [ 286.315914][T10178] ffff88804a6b6678 (&info->lock){+.+.}-{2:2}, at: shmem_mfill_atomic_pte+0x1012/0x21c0 [ 286.325744][T10178] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 286.333799][T10178] (&xa->xa_lock#4){..-.}-{2:2} [ 286.333816][T10178] [ 286.333816][T10178] [ 286.333816][T10178] and interrupts could create inverse lock ordering between them. [ 286.333816][T10178] [ 286.353102][T10184] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 286.353231][T10178] [ 286.353231][T10178] other info that might help us debug this: [ 286.371524][T10178] Possible interrupt unsafe locking scenario: [ 286.371524][T10178] [ 286.379835][T10178] CPU0 CPU1 [ 286.385205][T10178] ---- ---- [ 286.390565][T10178] lock(&info->lock); [ 286.394633][T10178] local_irq_disable(); [ 286.401381][T10178] lock(&xa->xa_lock#4); [ 286.408229][T10178] lock(&info->lock); [ 286.414818][T10178] [ 286.418271][T10178] lock(&xa->xa_lock#4); [ 286.422774][T10178] [ 286.422774][T10178] *** DEADLOCK *** [ 286.422774][T10178] [ 286.431097][T10178] 2 locks held by syz-executor.4/10178: [ 286.436648][T10178] #0: ffff888048f98f68 (&mm->mmap_sem#2){++++}-{3:3}, at: mcopy_atomic+0x195/0x2630 [ 286.446207][T10178] #1: ffff8880a41efbb8 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: shmem_mfill_atomic_pte+0xf76/0x21c0 [ 286.456811][T10178] [ 286.456811][T10178] the shortest dependencies between 2nd lock and 1st lock: [ 286.466767][T10178] -> (&xa->xa_lock#4){..-.}-{2:2} { [ 286.472068][T10178] IN-SOFTIRQ-W at: [ 286.476193][T10178] lock_acquire+0x1f2/0x8f0 [ 286.482627][T10178] _raw_spin_lock_irqsave+0x8c/0xbf [ 286.489716][T10178] test_clear_page_writeback+0x1d7/0x11e0 [ 286.497312][T10178] end_page_writeback+0x239/0x520 [ 286.504226][T10178] end_buffer_async_write+0x442/0x5c0 [ 286.511435][T10178] end_bio_bh_io_sync+0xe2/0x140 [ 286.518288][T10178] bio_endio+0x46a/0x820 [ 286.524360][T10178] blk_update_request+0x3e1/0xdc0 [ 286.531286][T10178] scsi_end_request+0x80/0x7b0 [ 286.537880][T10178] scsi_io_completion+0x1e7/0x1300 [ 286.544818][T10178] scsi_softirq_done+0x31e/0x3b0 [ 286.551677][T10178] blk_done_softirq+0x2db/0x440 [ 286.558405][T10178] __do_softirq+0x26c/0x9f7 [ 286.564776][T10178] irq_exit+0x192/0x1d0 [ 286.571366][T10178] do_IRQ+0xda/0x270 [ 286.577096][T10178] ret_from_intr+0x0/0x2b [ 286.583320][T10178] tomoyo_path_matches_pattern+0x56/0x280 [ 286.590899][T10178] tomoyo_compare_name_union+0x81/0xe0 [ 286.598185][T10178] tomoyo_check_path_acl+0xc7/0x130 [ 286.605204][T10178] tomoyo_check_acl+0x138/0x3e0 [ 286.611879][T10178] tomoyo_path_permission+0x1f0/0x360 [ 286.619081][T10178] tomoyo_path_perm+0x2f6/0x400 [ 286.625823][T10178] security_inode_getattr+0xeb/0x150 [ 286.632983][T10178] vfs_getattr+0x22/0x60 [ 286.639054][T10178] vfs_statx+0x142/0x1e0 [ 286.645129][T10178] __do_sys_newstat+0x96/0x120 [ 286.651857][T10178] do_syscall_64+0xf6/0x7d0 [ 286.658206][T10178] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 286.665934][T10178] INITIAL USE at: [ 286.669932][T10178] lock_acquire+0x1f2/0x8f0 [ 286.676186][T10178] _raw_spin_lock_irq+0x5b/0x80 [ 286.682788][T10178] __add_to_page_cache_locked+0x607/0xe00 [ 286.690252][T10178] add_to_page_cache_lru+0x1aa/0x700 [ 286.697277][T10178] do_read_cache_page+0x9ab/0x1810 [ 286.704272][T10178] read_part_sector+0xf6/0x600 [ 286.710880][T10178] adfspart_check_ICS+0x9d/0xc80 [ 286.717563][T10178] blk_add_partitions+0x474/0xe50 [ 286.724451][T10178] bdev_disk_changed+0x1fb/0x380 [ 286.731219][T10178] __blkdev_get+0xb15/0x1530 [ 286.737551][T10178] blkdev_get+0x41/0x2b0 [ 286.743555][T10178] __device_add_disk+0xa4f/0x1170 [ 286.750400][T10178] brd_init+0x297/0x463 [ 286.756324][T10178] do_one_initcall+0x10a/0x7d0 [ 286.763015][T10178] kernel_init_freeable+0x501/0x5ae [ 286.769986][T10178] kernel_init+0xd/0x1bb [ 286.775978][T10178] ret_from_fork+0x24/0x30 [ 286.782131][T10178] } [ 286.784858][T10178] ... key at: [] __key.18068+0x0/0x40 [ 286.792397][T10178] ... acquired at: [ 286.796302][T10178] _raw_spin_lock_irqsave+0x8c/0xbf [ 286.801779][T10178] shmem_uncharge+0x24/0x270 [ 286.806601][T10178] split_huge_page_to_list+0x274b/0x33b0 [ 286.812434][T10178] shmem_punch_compound+0x13e/0x1e0 [ 286.817815][T10178] shmem_undo_range+0x5f1/0x1b80 [ 286.822931][T10178] shmem_fallocate+0xbe2/0xd40 [ 286.827869][T10178] vfs_fallocate+0x48a/0xa10 [ 286.832748][T10178] ksys_fallocate+0x51/0x90 [ 286.837436][T10178] __x64_sys_fallocate+0x93/0xf0 [ 286.842557][T10178] do_syscall_64+0xf6/0x7d0 [ 286.847272][T10178] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 286.853333][T10178] [ 286.855666][T10178] -> (&info->lock){+.+.}-{2:2} { [ 286.860639][T10178] HARDIRQ-ON-W at: [ 286.864747][T10178] lock_acquire+0x1f2/0x8f0 [ 286.870907][T10178] _raw_spin_lock+0x2a/0x40 [ 286.877095][T10178] shmem_mfill_atomic_pte+0x1012/0x21c0 [ 286.884413][T10178] shmem_mcopy_atomic_pte+0x3a/0x50 [ 286.891356][T10178] mcopy_atomic+0xb31/0x2630 [ 286.897729][T10178] userfaultfd_ioctl+0x752/0x4210 [ 286.904827][T10178] ksys_ioctl+0x11a/0x180 [ 286.910817][T10178] __x64_sys_ioctl+0x6f/0xb0 [ 286.917088][T10178] do_syscall_64+0xf6/0x7d0 [ 286.923261][T10178] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 286.931238][T10178] SOFTIRQ-ON-W at: [ 286.935226][T10178] lock_acquire+0x1f2/0x8f0 [ 286.941392][T10178] _raw_spin_lock+0x2a/0x40 [ 286.947553][T10178] shmem_mfill_atomic_pte+0x1012/0x21c0 [ 286.954847][T10178] shmem_mcopy_atomic_pte+0x3a/0x50 [ 286.961705][T10178] mcopy_atomic+0xb31/0x2630 [ 286.968029][T10178] userfaultfd_ioctl+0x752/0x4210 [ 286.974714][T10178] ksys_ioctl+0x11a/0x180 [ 286.980695][T10178] __x64_sys_ioctl+0x6f/0xb0 [ 286.988761][T10178] do_syscall_64+0xf6/0x7d0 [ 286.994919][T10178] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.002454][T10178] INITIAL USE at: [ 287.006355][T10178] lock_acquire+0x1f2/0x8f0 [ 287.012429][T10178] _raw_spin_lock_irq+0x5b/0x80 [ 287.018879][T10178] shmem_getpage_gfp+0x937/0x2a10 [ 287.025470][T10178] shmem_write_begin+0x102/0x1e0 [ 287.031979][T10178] generic_perform_write+0x20a/0x4e0 [ 287.038832][T10178] __generic_file_write_iter+0x24c/0x610 [ 287.046035][T10178] generic_file_write_iter+0x3f3/0x630 [ 287.053072][T10178] new_sync_write+0x4a2/0x700 [ 287.059324][T10178] __vfs_write+0xc9/0x100 [ 287.065223][T10178] vfs_write+0x268/0x5d0 [ 287.071063][T10178] ksys_write+0x12d/0x250 [ 287.076962][T10178] do_syscall_64+0xf6/0x7d0 [ 287.083038][T10178] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.090510][T10178] } [ 287.093028][T10178] ... key at: [] __key.56628+0x0/0x40 [ 287.100737][T10178] ... acquired at: [ 287.104551][T10178] mark_lock+0x624/0xf10 [ 287.108986][T10178] __lock_acquire+0x98c/0x4c50 [ 287.113930][T10178] lock_acquire+0x1f2/0x8f0 [ 287.118611][T10178] _raw_spin_lock+0x2a/0x40 [ 287.123294][T10178] shmem_mfill_atomic_pte+0x1012/0x21c0 [ 287.129023][T10178] shmem_mcopy_atomic_pte+0x3a/0x50 [ 287.134426][T10178] mcopy_atomic+0xb31/0x2630 [ 287.139535][T10178] userfaultfd_ioctl+0x752/0x4210 [ 287.144734][T10178] ksys_ioctl+0x11a/0x180 [ 287.149255][T10178] __x64_sys_ioctl+0x6f/0xb0 [ 287.154027][T10178] do_syscall_64+0xf6/0x7d0 [ 287.158714][T10178] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.164771][T10178] [ 287.167096][T10178] [ 287.167096][T10178] stack backtrace: [ 287.172996][T10178] CPU: 1 PID: 10178 Comm: syz-executor.4 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 287.182878][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.192982][T10178] Call Trace: [ 287.196332][T10178] dump_stack+0x188/0x20d [ 287.200716][T10178] check_usage_backwards.cold+0x1d/0x26 [ 287.206271][T10178] ? print_shortest_lock_dependencies+0x80/0x80 [ 287.212575][T10178] ? stack_trace_consume_entry+0x160/0x160 [ 287.218382][T10178] ? print_usage_bug+0x240/0x240 [ 287.223328][T10178] ? save_trace+0x5da/0x9f0 [ 287.227837][T10178] mark_lock+0x624/0xf10 [ 287.232089][T10178] ? print_shortest_lock_dependencies+0x80/0x80 [ 287.238345][T10178] ? print_usage_bug+0x240/0x240 [ 287.243296][T10178] __lock_acquire+0x98c/0x4c50 [ 287.248065][T10178] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 287.253833][T10178] ? mark_held_locks+0xe0/0xe0 [ 287.258608][T10178] lock_acquire+0x1f2/0x8f0 [ 287.263295][T10178] ? shmem_mfill_atomic_pte+0x1012/0x21c0 [ 287.269024][T10178] ? lock_release+0x800/0x800 [ 287.273769][T10178] ? __this_cpu_preempt_check+0x84/0x190 [ 287.279410][T10178] ? do_raw_spin_lock+0x129/0x2e0 [ 287.284439][T10178] ? rwlock_bug.part.0+0x90/0x90 [ 287.289383][T10178] _raw_spin_lock+0x2a/0x40 [ 287.293897][T10178] ? shmem_mfill_atomic_pte+0x1012/0x21c0 [ 287.299616][T10178] shmem_mfill_atomic_pte+0x1012/0x21c0 [ 287.305170][T10178] ? shmem_add_to_page_cache+0x1390/0x1390 [ 287.310987][T10178] ? down_read+0x110/0x430 [ 287.315410][T10178] ? down_read_killable+0x460/0x460 [ 287.320644][T10178] shmem_mcopy_atomic_pte+0x3a/0x50 [ 287.325872][T10178] mcopy_atomic+0xb31/0x2630 [ 287.330475][T10178] ? mm_alloc_pmd+0x300/0x300 [ 287.335219][T10178] ? __might_fault+0x190/0x1d0 [ 287.339992][T10178] userfaultfd_ioctl+0x752/0x4210 [ 287.345025][T10178] ? userfaultfd_read+0x16f0/0x16f0 [ 287.350280][T10178] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 287.356176][T10178] ? do_vfs_ioctl+0x50c/0x12d0 [ 287.360941][T10178] ? ioctl_file_clone+0x180/0x180 [ 287.366027][T10178] ? __fget_files+0x32f/0x500 [ 287.370753][T10178] ? __x64_sys_futex+0x380/0x4f0 [ 287.375817][T10178] ? userfaultfd_read+0x16f0/0x16f0 [ 287.381024][T10178] ? ksys_ioctl+0x11a/0x180 [ 287.385690][T10178] ksys_ioctl+0x11a/0x180 [ 287.390034][T10178] __x64_sys_ioctl+0x6f/0xb0 [ 287.394726][T10178] ? lockdep_hardirqs_on+0x463/0x620 [ 287.400019][T10178] do_syscall_64+0xf6/0x7d0 [ 287.404649][T10178] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 287.410550][T10178] RIP: 0033:0x45c829 [ 287.414453][T10178] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.434585][T10178] RSP: 002b:00007fd7e7162c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.443004][T10178] RAX: ffffffffffffffda RBX: 00000000004ef800 RCX: 000000000045c829 [ 287.451009][T10178] RDX: 00000000200a0fe0 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 287.459171][T10178] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 17:59:04 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:04 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000c3000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x14) 17:59:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) [ 287.467157][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 287.475136][T10178] R13: 00000000000005b5 R14: 00000000004c8527 R15: 00007fd7e71636d4 17:59:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="d651311e02210600000000000000000000003a918faf000001002a790df1c3b934f1275e5d1445295b1b2b615924fd44132f6832485b75292f26e4f7c87b9d4cae687a52ec6e9e0443"], 0xa) close(r2) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000002, 0x0) [ 287.580405][T10179] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:59:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074700000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000e1ff000000000000000000000000000004feffffff"], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074700000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000e1ff000000000000000000000000000004feffffff"], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRES64=r2, @ANYBLOB="16b84dc37215a8ff82c5752a1ebfc11c99dbe1331e3e7ca42fdc19edc6960fb7a58740dd9d4d50bad1bc00", @ANYRESOCT=r3], @ANYPTR64, @ANYBLOB="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"], @ANYRES32=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 17:59:04 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000c3000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x14) 17:59:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xffffffffedc2a9ee, 0x1a}) 17:59:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xfb7, 0x42002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='/dev/input/event#\x00', 0xffffffffffffffff) keyctl$instantiate(0xc, r2, &(0x7f00000001c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '/dev/input/event#\x00'}, 0x28, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 17:59:04 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 287.894518][T10227] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:59:04 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000c3000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x14) [ 287.970347][T10232] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 17:59:04 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:04 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000c3000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, &(0x7f0000000280), 0xfffffed3) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), 0x14) 17:59:05 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 288.309901][ T26] audit: type=1800 audit(1587664745.103:28): pid=10228 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15931 res=0 [ 288.411695][ T26] audit: type=1800 audit(1587664745.103:29): pid=10238 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15931 res=0 17:59:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xffffffffedc2a9ee, 0x1a}) 17:59:05 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 4: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xffffffffedc2a9ee, 0x1a}) 17:59:06 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:06 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 17:59:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:06 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:06 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:06 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 17:59:06 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) 17:59:06 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 17:59:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:06 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) 17:59:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xffffffffedc2a9ee, 0x1a}) 17:59:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:06 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:07 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:07 executing program 5: socket(0x1, 0x80000, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) 17:59:07 executing program 0: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:07 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:07 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) 17:59:07 executing program 0: socket(0x1, 0x80000, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:07 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) 17:59:07 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:08 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) 17:59:08 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:08 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) 17:59:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:08 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 17:59:08 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:08 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:59:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 17:59:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000080)={0xc000002a}) 17:59:08 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:09 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:09 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 17:59:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 17:59:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 17:59:10 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 17:59:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 17:59:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 17:59:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:10 executing program 5: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 17:59:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 17:59:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:11 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 17:59:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 17:59:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 17:59:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) 17:59:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) 17:59:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) 17:59:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x16f8, 0x1}) sendfile(r4, r5, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 17:59:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x44040, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x56, 0x4, 0x3, "052af06fa98bc8397f11fcf54e7f63e4", "eab32c0ec34a63a25c3fbbc2b97d5a56e28bc5df0f07a71435d8d00576ed9470d5cdd0cf96af49d991eba3e687e730a19228d3221b3874d49a5429e534e23b00bf"}, 0x56, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd6d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffe065) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) 17:59:12 executing program 3: socket(0x1, 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 17:59:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) 17:59:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:59:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) 17:59:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f702000000ed0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c0002800a000400aaaaaaaaaaaa00000aa4a76a50af3c47dc1d64000400bbbbbbbbbbbb00000a00050004000000000000000800040000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0)