[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.960976][ T26] audit: type=1800 audit(1574828362.856:25): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.982293][ T26] audit: type=1800 audit(1574828362.856:26): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.002864][ T26] audit: type=1800 audit(1574828362.856:27): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. 2019/11/27 04:19:31 fuzzer started 2019/11/27 04:19:33 dialing manager at 10.128.0.26:34667 2019/11/27 04:19:33 syscalls: 2563 2019/11/27 04:19:33 code coverage: enabled 2019/11/27 04:19:33 comparison tracing: enabled 2019/11/27 04:19:33 extra coverage: extra coverage is not supported by the kernel 2019/11/27 04:19:33 setuid sandbox: enabled 2019/11/27 04:19:33 namespace sandbox: enabled 2019/11/27 04:19:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/27 04:19:33 fault injection: enabled 2019/11/27 04:19:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/27 04:19:33 net packet injection: enabled 2019/11/27 04:19:33 net device setup: enabled 2019/11/27 04:19:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/27 04:19:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:22:21 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9b9) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000080)={0x5, 0xffffffff, 0xbec3b4e6, 0x2, 0x6}) io_setup(0xffff, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x1f, 0x1, &(0x7f0000000100)=[{}], 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x6, 0x401}, {0x3, 0x4797beec}]}, 0x14, 0x1) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10010, r2, 0x4c82a000) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'teql0\x00', &(0x7f0000000280)=@ethtool_dump={0x3e, 0x10000, 0x81, 0xb7, "52e3eacf6083980b35575d06f1557d53a49e550fd9ae3d175b66f2383277edee124fcd62d72020ece4611c1a7fa0cb08a996a5c424fe8c288a9234ca839a510e1ffde7994379db470be8a0705858078b982f92b4c77fb38ec46b07df79bb04a6297794f75506dcddfe7db3e6fa9a5668bdfc1c70b27904c069580d9192040790929570dc53286dfefce6d00c6a49c04393735e53fe543fc37404b5df72b73be56e8194ab7dd31355e687cb7f45670ba8920127bacf76a0"}}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x401101, 0x0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000400)=""/195) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x2de, 0x0, 0x0, 0x0, 0x2, 0x0, 0x76b, 0x5, 0xffd8}) r7 = syz_open_dev$vbi(&(0x7f00000005c0)='/dev/vbi#\x00', 0x0, 0x2) sendto$llc(r7, &(0x7f0000000600)="e70f58dce83ec80c303e347d77d5a509b6319087b273c841e6078164f03961fdb4f6edd8717369416a88495cce78b68cfb8582a67c4bcb5e8f101fd2a165371a2e0d18259db35e2b9f70d80a6bc3fbeb44b7d57bca291ed0b5ada0c365cc5ae0d87b7c571a3b37421b80e78dd50abd", 0x6f, 0x8000, 0x0, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) r9 = fcntl$dupfd(r4, 0x406, r8) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f0000000680)=""/233, &(0x7f0000000780)=0xe9) r10 = accept4(0xffffffffffffffff, &(0x7f00000007c0)=@xdp, &(0x7f0000000840)=0x80, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000880)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8000, @bcast, @bpq0='bpq0\x00', 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000900)={0x0, 0x0, r9}) tee(r11, r6, 0x5, 0x52fc1b81c6982b7) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000940)) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r12, 0x6, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x6) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000a40)) 04:22:21 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x8, 0x4, 0x31, 0x0, 0x85, 0x28, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8e5b, 0xffffffff}, 0x0, 0xffffffff, 0x7f, 0x7, 0x9, 0x5, 0x1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5c1, 0x200480) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x100, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4}, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x10, 0xffffffe1, 0xfff}, &(0x7f0000000180)=0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x7}}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x3ff}, 0x8) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x0) r3 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="807c509ca3168445e9c7aaba6e5fe955f449f36507d793e9006d75f2b2549f2416b85f8104ce1a314382f1", 0x2b, 0xffffffffffffffff) request_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='/dev/vcsa#\x00', r3) fchmodat(r2, &(0x7f0000000500)='./file0\x00', 0x121) write$eventfd(r1, &(0x7f0000000540)=0xfff, 0x8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000580)) r5 = accept4$inet6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000600)=0x1c, 0x1000) getsockopt$inet6_dccp_int(r5, 0x21, 0x5, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) sendfile(r1, r6, 0x0, 0xfff) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000700)={0x0, 0x28, 0x42, 0x80}, &(0x7f0000000740)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000780)={0x80, 0x1000, 0x8000, 0x1, 0x5, 0x8000, 0x3, 0x120b0000, r7}, 0x20) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000007c0)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000008c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) mount$9p_xen(&(0x7f0000000800)='/dev/sequencer2\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='9p\x00', 0x800004, &(0x7f0000000a40)={'trans=xen,', {[{@version_9p2000='version=9p2000'}, {@dfltuid={'dfltuid', 0x3d, r8}}, {@version_9p2000='version=9p2000'}, {@access_any='access=any'}, {@cache_none='cache=none'}], [{@fowner_lt={'fowner<', r9}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x33}}, {@measure='measure'}, {@obj_role={'obj_role', 0x3d, '/dev/vcsa#\x00'}}, {@dont_appraise='dont_appraise'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_hash='dont_hash'}, {@euid_gt={'euid>'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x35, 0x31, 0x34, 0x38, 0xcf, 0x36, 0x64], 0x2d, [0x65, 0x83, 0x37, 0x50], 0x2d, [0x61, 0x65, 0xf3aabcd6e3e0bfc, 0x31], 0x2d, [0x32, 0x35, 0x66, 0x61], 0x2d, [0x34, 0x31, 0x6b8b876da5f62cf, 0x33, 0x62, 0x35, 0x36, 0x39]}}}]}}) creat(&(0x7f0000000b80)='./file0\x00', 0x929d2cfa203ee25d) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c00)={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x18}, 0x10) timer_create(0x2, &(0x7f0000000e40)={0x0, 0xb, 0x6, @thr={&(0x7f0000000c40)="6dcc0ffc72e212413d1f75f91ea3ced0845a01fbd12cb65a5d5a3a4c2d125615889f0f323ae93b52b4820b5949cfa8966a0bb6a3b1884fcb82cdd34125903fd9032c1a40a50b9330ffe80f26719690e04a707af1cba3df0729ae48399ddd0f4709f50a59742442201e18e38cc6425b55fac606d0f48ccf81c212b6f9c388c1e88d9a3bf9f1488ad90f9848e754006b2b58c45659cffd1f7863c3ecc427616f37fc7663480d2dc6b5a9dc696da0122977adcfbfbb13c07826a34c6e707857d37078a39081a1044691b6b423b6a086fae6310bb3539ade4bd642799655bcd6", &(0x7f0000000d40)="730b3a08b7f655fb9fc50fe2c31393d41bac8b4c22a76036d3116e0d05acd48e1b5c4ba6763b84fa8746b5e1f25d2c7c7a92912602568c5224d9667135338c7e8a41a1c7e14fb2c1b59943d8ee1a47d19e5267c56c7a3d68448d0df077035267dc1a4781224dc32dd56eb46e4a0645677ec68eef560d78be4736a66e883061c2f2b31755b7f13d7e0414c801276345087486cde3e928b06b4690b798593ce9080fb5ebc5856ddd90a882faa1372d333aa362d28927cbe989dc2fc4781b127ada8652951300fbc60f8caafacf35d80fe094c1a3e90061be3946eb42463dafa1432afb"}}, &(0x7f0000000e80)) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/full\x00', 0x200000, 0x0) ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000000f00)={0x20, "4e6c8b96774b660deea626a447f007c05d75bdefb089a599ac012aaf1c6df32b", 0x2, 0x1}) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40042409, 0x0) syzkaller login: [ 234.905924][ T8657] IPVS: ftp: loaded support on port[0] = 21 [ 235.089963][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 235.091996][ T8660] IPVS: ftp: loaded support on port[0] = 21 04:22:22 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x4000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x7452, 0x1e, [{0x3, 0x1}, {}, {0x5}, {0x9}, {0x3, 0x1}, {}, {0xa, 0x1}, {0x6}, {0x8}, {0x4, 0x1}, {0x8, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6}, {0x7, 0x1}, {0xc}, {0xb, 0x1}, {0xd, 0x1}, {0x3}, {0x8}, {0x6, 0x1}, {0xd}, {0xa}, {0xe}, {0xa}, {0xc, 0x1}, {0x5}, {0x3}]}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4) r2 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0xa, 0x1, 0x7, 0x6, 'syz1\x00', 0x4}, 0x2, 0x400, 0x2, r2, 0x4, 0x8001, 'syz0\x00', &(0x7f00000000c0)=['/dev/dsp#\x00', '\x00', '/dev/dsp#\x00', 'eth0#{\x00'], 0x1c, [], [0x1, 0x6, 0x4, 0x3]}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0x94}, 0x2) r3 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x6, 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000002c0)={{0x3, 0x1, 0xfff, 0x0, 0x1000}, 0x3, 0x20}) chdir(&(0x7f0000000340)='./file0\x00') ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000380)=0x80082) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x80000, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x10000) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x200000, 0x0) openat$cgroup_type(r5, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f0000000b80)='/dev/media#\x00', 0xf7, 0x400000) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/vga_arbiter\x00', 0x8300, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/dlm_plock\x00', 0x48400, 0x0) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c80), 0xc) r13 = syz_open_dev$rtc(&(0x7f0000000cc0)='/dev/rtc#\x00', 0x1, 0x84181) r14 = syz_open_dev$sndctrl(&(0x7f0000000d00)='/dev/snd/controlC#\x00', 0x9, 0xa40) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d40)={0xffffffffffffffff}, 0xc) sendmsg$unix(r4, &(0x7f0000000e00)={&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000500)="94048888eeb040f4d6f8ab592d6c6baacf879f3abec46a1c84bf1522c9a2e0a3bbc0ef15ac0cacc13eb87cf36379e73f20389ed0b18ee87e8d6a21d5abf5358684ae2856b5d4046fe8bdece120ac9982f912397f0a0ba42753ee564e4eaf29ae3067611af83ffc4424c0ce17500f874fd1d98f0b2dd53b89e101bfd7dc308e92ed62967a9ba95aa4d3daeef4bcaf4113f69915a848831739513033bf6d554a3cd752d901ee36eba8ec4c88ba225129138499b4dd00dc89da6a2120d5bf919140be70c42591d33f3495845a593b01273cf0", 0xd1}, {&(0x7f0000000600)="3f42d994960c904a535d15db81b51f8c30310d1ff0cce47222a3e3486e3a6ddf1a2a8510e2ac7c61144ae14970b40519dc8c3996af2df2979671cc01eecd0ca55a64e3f83a743860f224e88d026e60ae4becaeaa67515e9733aaa0ee2024ffd4d7ae2007a1667b89fc0ba4739774977f756d8ef68585d03005fa4bcc179c2ad911cf4f4df64dff567a9c54a617bd0186a2aa02", 0x93}, {&(0x7f00000006c0)="488b1edec11b585bc970269dd6c528b05464035caaff799735318a1b509ce6d69799919321ecc1a7fe8768d4bd43b8c7be0740cdd457e1b38a03ffcf1e4ed3de00864d5a2ea5fb41a44d2099173b0fccd4a127ca977665333af1a033ba10274220d7f6b7be29f89e57c3e6ae6d0fb9fee129545b91acd4043c4c41bc4a62930fbc63e734cb4efed159f9dcc3e496", 0x8e}, {&(0x7f0000000780)="2d277b8f2a47de7e07e8bcd4ca5cc13dabaed44a149d3e8ac89c7a49aae2f9535a38", 0x22}, {&(0x7f00000007c0)="dcf1fd7027e3c3e0b87d9d3804fef163f93946805323488871ffeefa00d453115d9617137882f8a3ebd35d398810c2e116652a99bcb2f7809d39be2d51e5ccdfd09f25188a51c32546a1a72cc3e547242eb6f7c04a0dc68657fcb1122dfe827ddc4771757dd35f157da4a4b8deeb9bca381868e7bf739ade0708ab438ec61aa69beafdb35c6c43a501a5a9deb3d950ce691a32940ea4f7723c2a2d4e3576095f0d5d5c9c8c1ddd3cfcdde424b0af1a684ff53e68c6dcbc9c11e71afd07844aab8c8f19f26d415241ea", 0xc9}, {&(0x7f00000008c0)="d8966e8846e9ad84d059f69b92c6ce2ab93171a3a1d8d24830c86bd0e3cfd5447f518e13c3fcbb7fe471973feb7d97fd3d4014088561631b9bdcafde2f3d528e5b5fe6908259853db201775aed49c8f0951ad9731919c576b1614339555572109ee41dc24ccb76323efe93da4f683472846a5932951b7e0625f649a6ae8fd0549e1de6baaddc45807d6e49fe997e019951ab7349928e6543acf8b72dd8b6", 0x9e}, {&(0x7f0000000980)="ceeda2a2db1c48249dda007bf82ea1c3825f323fcf98dd554e691f64d738b13dda923142c5c40e82abb939f200fc237a0880678b6aa1d43e113cde0084b54b2df79162bad6ce823a63e206ec5142e7805bae94008527c9841779a372a880ab9029710b538a1781c72b850b09a8af336cadee4f3bd0edad54eea7c97a924c1c85e7d76de54526f3e248037b9db770fd0f16c7f446fded5cb29e81bf820b548eb4fc6a0da7dc254ac909ec68dd1166a7e9ed0cbb94bea5c6f9fc630a69", 0xbc}, {&(0x7f0000000a40)="256168d8447312a23996f7895477839a8c2d0e65a0cbd25eef12c8ef9c8d14e346ce7ef6701fe41b806ea12b9f01ea08fe3de7c2acaa4c6d64414e027c37b70698420f6d82d80eb967f481282dc7b094b910df4a38baee95ca1c41c6d3d932b7b186637597696955904ccf065922048a9609ba63d168de4e6046d0ffdb992dbf09c12cae1e832aece2059894dbb296e34aaf746daa2c4c4b5599795faa910920d21c26e7ad696ce63c1ef580ab1eec0f", 0xb0}], 0x8, &(0x7f0000000d80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r6, r7, r5, r8, r1, r9]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r10, r11, r12, r13, r14, r15]}}], 0x68, 0x60045000}, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000e40)={0x73622a85, 0xa, 0x3}) r16 = syz_open_dev$dspn(&(0x7f0000000e80)='/dev/dsp#\x00', 0x1c5c, 0x380000) write$P9_RREAD(r16, &(0x7f0000000ec0)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) r17 = openat$full(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/full\x00', 0x44100, 0x0) r18 = syz_open_dev$audion(&(0x7f0000002000)='/dev/audio#\x00', 0x1, 0x20000) perf_event_open$cgroup(&(0x7f0000001f40)={0x3, 0x70, 0x4, 0x5, 0x5, 0x1, 0x0, 0x800, 0xa5001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x23f, 0x2, @perf_bp={&(0x7f0000001f00), 0xa}, 0x4, 0x8, 0x80, 0x6, 0x7, 0x1, 0x7ff}, r17, 0xc, r18, 0x2) [ 235.167056][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.175958][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.184251][ T8657] device bridge_slave_0 entered promiscuous mode [ 235.195116][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.202336][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.211379][ T8657] device bridge_slave_1 entered promiscuous mode [ 235.274138][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.355858][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.405449][ T8664] IPVS: ftp: loaded support on port[0] = 21 [ 235.425064][ T8660] chnl_net:caif_netlink_parms(): no params data found [ 235.443309][ T8657] team0: Port device team_slave_0 added 04:22:22 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x822801, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000140)={0x3, "2d454bfabe0a874962793fa271eef5a82ae78bb497796b40e3bc1bd7912ff6800e56c00439d05743c078bbed6df3b39912c3fc33ba3efbf63199aa66da27b450a1bef13a4ab4b941e54df9e5e4eff73269916ba9a8f56b063ea88cea7240acb9db175d24d4e5ed20e863a43c48989b1103299e7210cd637d0e22740bacadf9c3deac1684d4961e495f01785a2c61bebff16f331c55ca95542ca4f4a3ba774b653ed6e8acfb416bc91390441dc077ac072f6ff1989f9e4981ed7c87e4864d019529818d1424091982211d3d2497a6851ec3b75fd1ef5a213f2d3c4e1a2a1152e449fa99c30f886f38499fed0b1cc08aa7006c936896112ab723171a860b407702"}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x101}, 0x28, 0x1) r3 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x200, 0x8040) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)=""/95, 0x5f}) r4 = open(&(0x7f0000000440)='./file0\x00', 0x80, 0x117) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f00000004c0)={0x0, 0x6, 0xffff8001, [], &(0x7f0000000480)=0x3}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x400000, 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000540)={0x7, 0x4d, 0x1}, 0x7) r6 = open(&(0x7f0000000580)='./file0\x00', 0x1, 0x20) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600)='devlink\x00') r8 = gettid() r9 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x79, 0xac000) r10 = syz_open_dev$cec(&(0x7f0000000680)='/dev/cec#\x00', 0x2, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000006c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x40) r12 = syz_open_dev$mice(&(0x7f0000000840)='/dev/input/mice\x00', 0x0, 0x10000) setsockopt$inet_int(r12, 0x0, 0x16, &(0x7f0000000880)=0x5, 0x4) r13 = syz_open_dev$swradio(&(0x7f00000008c0)='/dev/swradio#\x00', 0x0, 0x2) pwritev(r13, &(0x7f0000000a40)=[{&(0x7f0000000900)="0ade3d785e7b01ef6f7d1150a3933da5ce33b7c5d29c9ad5b6b56e7f7bbd48ede2528edf3405cda5b2f785a05c9cf5217dfcb0a902ae5ea45a285cc0450e156a5c44f485da4aec730c40b6db360b97d247a43a669056db124a565ef4bc1cf499b3fb9b2be946528484c5760f4612ab5463ec5c34c4f308d3ac608ee2e8bc9b62f88148550f2447d56c68652952ca600881d3f503a49593de1b66c5548d7820af8f4eb55071493245142cc310e5e8514f9551dd9645a43b1ba88b52442028d2cbf4", 0xc1}, {&(0x7f0000000a00)="042beef0729d5042cc61189a5eec83574c0050d0a929c75bef309da3e6d8125d7e4b52fbbe95e16a8f7b2a3fbc958097", 0x30}], 0x2, 0x0) r14 = open(&(0x7f0000000a80)='./file0\x00', 0xffb13ebd5b155c0d, 0x65b2d71ce096d99c) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r15, 0x10e, 0xa, &(0x7f0000000b00)=0x7fffffff, 0x4) removexattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@random={'trusted.', '/dev/ubi_ctrl\x00'}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dlm-monitor\x00', 0x2800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000d40)=0xe8) sendmsg$nl_route_sched(r14, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@delqdisc={0x30, 0x25, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0xf, 0x7b152207dc90d03b}, {0x1}, {0x0, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4400084d) [ 235.468703][ T8657] team0: Port device team_slave_1 added [ 235.624946][ T8657] device hsr_slave_0 entered promiscuous mode 04:22:22 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {r0, 0x3172, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"24dcbaa991e870bd070f4eb49c44090d"}, 0x7, 0x0, 0x7}, @in6={0xa, 0x4e20, 0x4, @empty, 0x5}}}, 0x118) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) ptrace$getregs(0xe, r1, 0x9, &(0x7f0000000200)) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x404000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000280)={0x7fffffff, 0x40, 0x40, 0x8, 0x4, 0x8}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000002c0)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10000, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r0}}, 0x18) r4 = open$dir(&(0x7f0000000580)='./file0\x00', 0x400000, 0x4a) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000005c0)=""/92, 0x5c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000006c0)={0x2, 0x8}) syz_mount_image$ext4(&(0x7f0000000700)='ext2\x00', &(0x7f0000000740)='./file0/file0\x00', 0xff, 0xa, &(0x7f0000002b00)=[{&(0x7f0000000780)="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", 0x1000, 0x1166}, {&(0x7f0000001780)="4b18c4f63686397a9b024fd0593ca40a741bc909efbd9c59ef9a59cdf8e780ade8790d51dccd6217ce298c061575e1ce4cc2581955fbbdac7549654175bb485dcc94970b4d0e645a01e96d2ef1340d453bbc45", 0x53, 0x1}, {&(0x7f0000001800)}, {&(0x7f0000001840)="bcc9a3355df600192a054014b77304fccacacc20c16cf7b7f9d7c299fec151e4e298b82d19756b", 0x27, 0x1}, {&(0x7f0000001880)="7e404379a21afd8987b0f440f226ac103e169bcb2437d5420ed56323241e8fce4204e9cd22f978", 0x27, 0x4}, {&(0x7f00000018c0)="a3920ec53590a44a63124d632e33a80954befa91a8451852984e8e8cfbcbb0551f97243a2a606902d1d3718334fa0f23047d6f13dc6372f59fb3479c133f0f0018c524c17251a8e4a73922dc34ab68b47cdb2de7bd97ff6cbfd9a6baa2f2a5c6edd5490c86222d8f4b9a4d1c2e913f32af8f8a826bc68ce385acfbe3726463301c9a46447a7b5195f7680a7705f751254b149e5b9e45585aa58815ee64d06d7fa3453ed9", 0xa4, 0xad}, {&(0x7f0000001980)="80c343a385f93aa8da6bc8db74afb142d39893a122af4a79a557a8e61eb275c283c2523d40ac1d148d6073d7ab7ed83d95d277e3c016fd09883f2d39ea2fd34f3ff943c0f319aae6c07d781eec", 0x4d, 0x3}, {&(0x7f0000001a00)="5d0b98", 0x3, 0x4}, {&(0x7f0000001a40)="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", 0x1000, 0x2}, {&(0x7f0000002a40)="91263ce4226bc1e61a93bc982254cdc551b556e1373bab0d56d244aec8f8d9e420bd41c34d7aeaf45b6fcc7e6c8b151e0ce0140bb666018154cd1212f1d90d435438ae79a9cfe674541d5a6b9c9937e0af6948423b2dda409a1b0abc92c5445b5faf9817610803cb4489094d22c227dcb3379311578482abb9b77f111254e905c29bc5abe2856c3bcee367", 0x8b, 0x400}], 0x20, &(0x7f0000002c00)={[{@orlov='orlov'}, {@nobarrier='nobarrier'}], [{@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/dsp#\x00'}}, {@obj_role={'obj_role', 0x3d, 'ppp1+bdev@-em1bdev/selfvmnet1+ppp1\x1b\xaf[$.'}}, {@smackfsdef={'smackfsdef', 0x3d, '/selinux$nodevnodev,--bdev'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vhost-vsock\x00'}}, {@permit_directio='permit_directio'}]}) open_tree(0xffffffffffffffff, &(0x7f0000002d00)='./file0\x00', 0x800) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000002d40)) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000002d80)=0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r2, &(0x7f0000003440)={&(0x7f0000002dc0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x1, 0x1, {0xa, 0x4e20, 0x14f9, @local, 0xc42d}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002e40)="f3080ad5b7ef6969edc39d8e4c66d7672692bb0d6f9b887e9bc9e080dd945241babd8420f9052a3827de99947e301ff63024eb544fde9204fce7ad86df319c58431b2fab56bb071a25523adbad6813a4584358e6b63e6a525db08c21b1608ce001ca567f5cdd7ac52eeae43d6139d51bfa1cba8ed18ce7a87f765672f75e6770ec0a92a373e25444cf440ae94b1bba351226b696c7422c475739dd63eb9109c0ab43c78a523909f06f08c9fc8804d585becc4ddc3de36ea017222e7971900c6f2f115b66f1c6", 0xc6}, {&(0x7f0000002f40)="c3bb12d520f81ca31e6392cf0db1545ffa2a93b9c76d261615eaae0bf1ae4eba8a80c760ad59e9fe7f9640067995ed138bfdce86a76c7875ec39054565da6f279230983c3e21eed3d31d158c1df0ebbdbbd6af8026741abc5e4135b63e82fdd2b9244b1d76cb32f12306c75c26e06bd343e9562643747a56dfbc02b557e1", 0x7e}, {&(0x7f0000002fc0)="f0faa9a259790c7baf4103da3eb2d3ddd24cee01521966f40804c83baaa5214017ec6aa00c74df0db5710d7e96912e6e8d48d66dfb966556ce6c6c8f9fe448c82fe96e5446f342703c2721fab5ac4f69716a2f57adf82a8a2c3d913b90de1259d1ba97d843167886824c966d9e5c461ef93a55775a2c326a7647f7f2d340768a213c51ccd8af", 0x86}, {&(0x7f0000003080)="172abd7edc2a7221348d72be680a33f4310bb744c3718f5835156b95866cb8e6bb313981a591ddeb8b7be3bd1bc3b9bfc6e559d84aa7add8ca68ee7b7353adc79d7a2ad0b1af304d941ed7ddeda80ddba8e1aa928ffab95804181bab63c88547c7211ede7ac101f77dd74124967250f244b23ce39824f30098eaba98a47297d7a7f2312304c26356a20778684c81165166306c43", 0x94}, {&(0x7f0000003140)}, {&(0x7f0000003180)="c56878ac220178a051b9466f01c0f481bce1c632642eae7638b6be70c8020b79f6642bbb51aa1e4bff949ccbf64e0f1b0bac8a0f721c92e22814daff8a441ed342fb063c8371e27bfb8eed8e9f7b831b24b944e1cf06de2a1133cd462a5c5b742a925448edf848d4df9b53b7ccfd199ab83cc5ba174307fa7f014d21345c6c5047a8d08fc0cabc7338ff9bfc4ef344c71f2b40ca334339f43a2af1ad5ad9748f50697be81095fcaa54faef6dd527495a755daa", 0xb3}], 0x6, &(0x7f00000032c0)=[{0x108, 0x0, 0xff, "800c0c9faab693fef18a254d12cb8641c179b23352b9cf6c990541c8572a302a22160991f8bd4729f62321c1863f56330e90ac9d1d0dcda04b96f3fc92e128663b209f2bdd84205801e64c21eb4528e025d7ed57b7b7234e8cff944cdd6b4defd2e9382c8ad457a38902591e294fee70ba0b775460752d5ddd22bcf0f8b17485b905bfb31f6d21dbe8b7d2d6321f255c62fa4488391e25a1af2da68be624279899519640135dc0a3613bd47233c96fc1f8aa175a64d873c4e31be6b56c6de1ac7e35f63f6501af2b51b6929f8cc4fe40d35bbbfd5cf7031611f5ce088a1d0a35a4c74c80d9a69396700fa7952febea7d9be55e"}, {0x48, 0x101, 0x80, "25e24a19c73d75e17288c096a0d095737ffeb4013daa62fa567081e35a637d600dad795f6d658c3a75fd76f0cc433ae84ced"}], 0x150}, 0x4020841) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003480)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000034c0)={0x3a, @broadcast, 0x4e21, 0x1, 'none\x00', 0x0, 0x0, 0x73}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003500)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003540)='/dev/autofs\x00', 0x0, 0x0) write$eventfd(r8, &(0x7f0000003580)=0xffffffff, 0x8) r9 = getpgrp(r1) sched_setattr(r9, &(0x7f00000035c0)={0x30, 0x6, 0x1, 0x4, 0x4, 0x8, 0x0, 0x8}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000003600)={0x7fff, {{0x2, 0x4e24, @broadcast}}}, 0x88) recvmsg$can_bcm(r7, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000036c0)=""/33, 0x21}, {&(0x7f0000003700)=""/161, 0xa1}, {&(0x7f00000037c0)=""/189, 0xbd}, {&(0x7f0000003880)=""/160, 0xa0}, {&(0x7f0000003940)=""/35, 0x23}, {&(0x7f0000003980)=""/100, 0x64}], 0x6, &(0x7f0000003a80)=""/99, 0x63}, 0x20) [ 235.689886][ T8657] device hsr_slave_1 entered promiscuous mode [ 235.781905][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.798609][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.806710][ T8660] device bridge_slave_0 entered promiscuous mode [ 235.837608][ T8666] IPVS: ftp: loaded support on port[0] = 21 [ 235.857816][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.866915][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.879361][ T8660] device bridge_slave_1 entered promiscuous mode 04:22:22 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x40, 0x92800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x8c, 0x6}, 'port1\x00', 0x9, 0x30400, 0x0, 0x3, 0x10000, 0x3, 0x6, 0x0, 0x4, 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000140)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000001180)) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='oom_adj\x00') ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000001200)={0xb, 0x9, 0xffffffff}) r2 = request_key(&(0x7f0000001240)='.dead\x00', &(0x7f0000001280)={'syz', 0x2}, &(0x7f00000012c0)='\x00', 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000001300)='keyring\x00', &(0x7f0000001340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000001380)='id_resolver\x00', &(0x7f00000013c0)={'syz', 0x3}, &(0x7f0000001400)="a87a92d8912ec43981063b7630e439d01e8cf4bb5e016fd896", 0x19, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000001440)=0x6, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000001480)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000001500)={&(0x7f00000014c0)=[0x0], 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001540)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000001640)=0xe8) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r6, r7) r8 = socket$rds(0x15, 0x5, 0x0) r9 = accept(0xffffffffffffffff, &(0x7f00000019c0)=@nfc_llcp, &(0x7f0000001a40)=0x80) sendmmsg(r8, &(0x7f0000002080)=[{{&(0x7f0000001740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x3, 0x2}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000017c0)="6470a50d2b69da5c96d60a6a04f435d7e0eb66482b9f5c18b26c75db8e55d89453125062011aac640048926ea0a356fec46d480d8814d8382158510c2c970c45a0d22fa56ddd18f026a3ecff72ac2d535689623343652b9a580830109d8765a425aec703fda8fc43da504b4fcc129b7b75bc3b67f2ab83ef15628502e9e58c7969718e6d908fd44b58591dac1a37b7ae34c9bb215311d126ac92f8da1a2f44", 0x9f}], 0x1, &(0x7f00000018c0)=[{0xd8, 0x103, 0xc535, "a1e58f6a738e473c375b43875edb5748e9eb9cc8441159e36b934ef944e4b2ad5a538466c2d60fb77f5423d9c4dc77326c6806d613c4b4ace14aca122598c045cb767fdcfa50b09bf93de8dacb5155556ecea272c6b6081cabb52ec73bddf54aec56a150a5a92adce91b89d530ce187b0d155e7a566504ec063f3b0515c77704283c0bb8328acab34751d1c0de74097ce193eb3d6c722a3d64246f61adc90676f81ede4b88ddcf0caf4435371af21fdd630c8fb7b052632382407bb7f9a621c848060069"}], 0xd8}}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0x8001, @empty, 0x2c}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)="d7cdd7b5f64c305b9bc364892ef6859efa4eff5c8d0d87ec26dd82fccff07cddfde36ddfe4f9535da522010fb38980765dcc56c4cc32ef7df17bfadba29be616d77691213f5494fe001de5295c28664e3004037fb99b2d5d15b01b64c3fc1f434ba660ca3e46742102ad1f26950d", 0x6e}, {&(0x7f0000001b80)="f2fd107cc9b5cac6bb86ed2288f3b0b927c9a1265e50005f3343baeb4d822fc04583fcc23735a8", 0x27}, {&(0x7f0000001bc0)="acd8300e96d14c4d2e771b054a4725e474a6171a48296df2d20b43ac372f14c804d0995dced1908efa3418ab071a150fedccd5ea09e504e3845a08de9e", 0x3d}], 0x3, &(0x7f0000001c40)=[{0x90, 0x102, 0x3, "9a17403212e7a5358cb5e571530165d23f2d46a25229e0093bf6009ecdb3105246d9d21f6a27263ee284bf8173484d7131b323071fb27aebb4f96f8486c769ce1b7a187bfa28da55ec9c9714b592a1a89f1aa76e7748aea2ab649aa5a149bdc1ad1ac642b6091ddf436b3c99b02c55c325e3ff718f652161b86bee"}, {0xe0, 0x84, 0x8001, "574a198830580e2492cbdbe3d9bcd7a6e931fbbf036a2f7de4cf8bde8a6f32cf6d5305d552e70f6d9cde2cfab0e3dfb328355dfa129ad86a91daa86f09465a578d5fd6d2ae42981acebd56eff150c15dc1a0ef79f7856de021a1268e9419b40a0fd463e4990893237024643aa5e0c3341da6abe75a0e6065eef41b0b1f19e3ea7e950e4dac787d1a997863c90fe2f3557ac1edff6473dec9dfcfe4f7f5b64c624ab7aefa45ee7b595847437d0ced6aa2a62432a44160081e87cac9916b20871b5eff5f30052f32dba170740ffa8dc8"}, {0xc0, 0x6, 0x5, "dc4236f778549405c1cba99045c994962388aa8fa4a052d2b24309716522a2f3817fc2d6189318e657663cac68ea59f0915dd32523daee4b3448fcf50f3c0778ef71fde4e87061265f8fc716c837616c61c007d96611ceb5832a7c66742763029adf49dfd940071a776661fe91547498eef0598a6d095676d1aa7c327881df8fefc0040f18e5cf7fbcc8e27608013695ec68e215823c3cfebf8e8bad3b2ef1737084977e5fcc10b74c67f0"}, {0x28, 0x88, 0x401, "f814675b9bdaf09920e3c089ae83880b6fc2eb5a"}, {0x98, 0x607a1475e2138e79, 0xffffffc1, "3e883f2294046062598df9b93f8db0093787c5bb11fc2677b838f179adc8fee2d13727aacdf3e2a287f79fc25545ad23164589d1afc8f27f945fd7828f8b0560995da0970f6e6942f2d2b5e283d69133b652bed7545517889e755104471255dbec04153706d4080d58fcff79c68ae248fd8e97b8dc211f5ee845938a1bc5c1053011d389e47c32a4"}, {0xb8, 0x112, 0x9, "bc374d47010c6eae003af873082473be4afaf9ac8e911763893c60a18f5adbd4419d13aa6ad299c1e7becf007a7ccc4ca585e60621caf3524751a98f0395e173bda8cad09f6a347a5d13f44614477a8b43c16271430650a0a3237f73cee6159d34f4be5677d3b1d96fe149ac5e3ce3df5f17a0c39ca59311740496bb24fd22471b6393b9689a0739502ed7e639976345e72aa905183197d11bdbf843d74c8f4ab441444656abb269"}, {0x90, 0x88, 0x1, "ace9744bac3acd4739ffa587d8faef57b1e74fdf3c5889a7093675165bdd5e1f1fa9f4befc6c63477185e11c37f0d876491807e5c59042784d276cfcfd3264b8645555619a2790dd916a9575da67200804dd331cb14818077dfc8d41ca5e2bcec6c4e28642192150d945d0dca8a3ea8b0a62b63b3e778794e98c50ea1148"}], 0x438}}], 0x2, 0x100549b72f89b0a9) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000002100)=[0x400, 0x9]) syz_open_dev$sndpcmp(&(0x7f0000002140)='/dev/snd/pcmC#D#p\x00', 0x6, 0x14081) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000002180)='/dev/zero\x00', 0x80180, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0x4008af12, &(0x7f00000021c0)={0x1, 0x1f}) request_key(&(0x7f0000002200)='id_resolver\x00', &(0x7f0000002240)={'syz', 0x1}, &(0x7f0000002280)='keyring\x00', r3) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) getsockname$packet(0xffffffffffffffff, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002300)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002340)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@rand_addr="7448997be639b140bd3ad16cda8597d7", 0x4e21, 0x0, 0x4e20, 0x6, 0x2, 0x90, 0xa0, 0x0, r11, 0xee00}, {0x8, 0x7968, 0x1, 0xffffffff, 0xffffffff, 0xfff, 0x2, 0x9}, {0x1, 0xfffffffffffffffe, 0x800, 0xe4}, 0x1000, 0x0, 0x2, 0x1, 0x0, 0x3}, {{@in, 0x4d4, 0xf1bf57d12c7ff74a}, 0x2, @in=@broadcast, 0x34ff, 0x2, 0x0, 0x68, 0x3, 0x40, 0x101}}, 0xe8) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000002440)={0x7, 0x1, 0x0, [{0x1, 0x64, 0x9, 0xb1, 0x81, 0x40, 0x6}]}) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$NS_GET_NSTYPE(r12, 0xb703, 0x0) [ 235.985280][ T8657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.992111][ T8669] IPVS: ftp: loaded support on port[0] = 21 [ 236.058058][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.072586][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.086287][ T8657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.151088][ T8657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.180853][ T8664] chnl_net:caif_netlink_parms(): no params data found [ 236.219143][ T8657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.226832][ T8672] IPVS: ftp: loaded support on port[0] = 21 [ 236.277138][ T8660] team0: Port device team_slave_0 added [ 236.302144][ T8660] team0: Port device team_slave_1 added [ 236.381646][ T8660] device hsr_slave_0 entered promiscuous mode [ 236.420454][ T8660] device hsr_slave_1 entered promiscuous mode [ 236.480037][ T8660] debugfs: Directory 'hsr0' with parent '/' already present! [ 236.495602][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.504387][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.512346][ T8664] device bridge_slave_0 entered promiscuous mode [ 236.522691][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.529852][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.537470][ T8664] device bridge_slave_1 entered promiscuous mode [ 236.585303][ T8664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.598911][ T8664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.653565][ T8666] chnl_net:caif_netlink_parms(): no params data found [ 236.686769][ T8664] team0: Port device team_slave_0 added [ 236.697064][ T8664] team0: Port device team_slave_1 added [ 236.750443][ T8660] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.835653][ T8660] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.874707][ T8660] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.000692][ T8664] device hsr_slave_0 entered promiscuous mode [ 237.068960][ T8664] device hsr_slave_1 entered promiscuous mode [ 237.128580][ T8664] debugfs: Directory 'hsr0' with parent '/' already present! [ 237.136257][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.144539][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.152344][ T8666] device bridge_slave_0 entered promiscuous mode [ 237.161353][ T8660] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.218961][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.226074][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.234377][ T8666] device bridge_slave_1 entered promiscuous mode [ 237.276650][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.297655][ T8669] chnl_net:caif_netlink_parms(): no params data found [ 237.329904][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.348353][ T8664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.412064][ T8664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.497570][ T8672] chnl_net:caif_netlink_parms(): no params data found [ 237.509382][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.533347][ T8664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.584078][ T8664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.654472][ T8661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.663188][ T8661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.695352][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.706458][ T8666] team0: Port device team_slave_0 added [ 237.724809][ T8666] team0: Port device team_slave_1 added [ 237.756568][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.764022][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.772144][ T8669] device bridge_slave_0 entered promiscuous mode [ 237.781066][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.788131][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.797351][ T8669] device bridge_slave_1 entered promiscuous mode [ 237.807036][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.816283][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.824793][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.832014][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.880716][ T8666] device hsr_slave_0 entered promiscuous mode [ 237.930759][ T8666] device hsr_slave_1 entered promiscuous mode [ 237.968685][ T8666] debugfs: Directory 'hsr0' with parent '/' already present! [ 237.982135][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.989728][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.997383][ T8672] device bridge_slave_0 entered promiscuous mode [ 238.005872][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.013093][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.021229][ T8672] device bridge_slave_1 entered promiscuous mode [ 238.044750][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.053127][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.061806][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.070298][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.077333][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.085672][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.111321][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.123235][ T8669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.137099][ T8669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.147400][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.155938][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.164572][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.173803][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.190747][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.213834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.224180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.232917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.241648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.256909][ T8657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.269698][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.292144][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.300677][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.320935][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.346030][ T8669] team0: Port device team_slave_0 added [ 238.364685][ T8669] team0: Port device team_slave_1 added [ 238.377757][ T8672] team0: Port device team_slave_0 added [ 238.389232][ T8672] team0: Port device team_slave_1 added [ 238.399699][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.407373][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.415396][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.503301][ T8669] device hsr_slave_0 entered promiscuous mode [ 238.551095][ T8669] device hsr_slave_1 entered promiscuous mode [ 238.598725][ T8669] debugfs: Directory 'hsr0' with parent '/' already present! [ 238.629196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.639947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.651071][ T8660] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.657885][ T8666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.695772][ T8666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.771558][ T8672] device hsr_slave_0 entered promiscuous mode [ 238.819349][ T8672] device hsr_slave_1 entered promiscuous mode [ 238.858579][ T8672] debugfs: Directory 'hsr0' with parent '/' already present! [ 238.877871][ T8664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.896470][ T8666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.941086][ T8666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.004396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.013223][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.022101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.029240][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.037202][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:22:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x7bb, 0x4}}) [ 239.065103][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.082824][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.091346][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.098424][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.106692][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 04:22:26 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7379737667f2732c75737271756f74612cd7417e2617ae887df5bbeac3000100b5f5852ec569ef1805a0bffffa2d4197196ba9376d1ddd329d3e25de562f6252b492"]) [ 239.162884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.195248][ T8664] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.245784][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.254935][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.262940][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.276175][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.335055][ T8672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.344553][ T8688] XFS (loop0): unknown mount option [sysvgòs]. [ 239.386615][ T8672] netdevsim netdevsim5 netdevsim1: renamed from eth1 04:22:26 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7379737667f2732c75737271756f74612cd7417e2617ae887df5bbeac3000100b5f5852ec569ef1805a0bffffa2d4197196ba9376d1ddd329d3e25de562f6252b492"]) [ 239.433626][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.447519][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.456400][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.475084][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.488471][ C0] hrtimer: interrupt took 46675 ns [ 239.495518][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.519338][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.526448][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.526985][ T8694] XFS (loop0): unknown mount option [sysvgòs]. [ 239.542879][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.551908][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.560387][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.567414][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.575235][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.583987][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.592454][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.600708][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.609329][ T8669] netdevsim netdevsim4 netdevsim0: renamed from eth0 04:22:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080000000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xd3, 0x0) [ 239.667608][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.687028][ T8672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.760133][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.768171][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.777837][ T8669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.849309][ T8672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.885402][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.894014][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.902814][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.911974][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.920568][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.929102][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.937696][ T8669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.995148][ T8669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.070078][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.077594][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.090981][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.118035][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.134202][ T8664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.146065][ T8664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.157703][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.168143][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.177081][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.186721][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.195293][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.275671][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.313569][ T8706] 9pnet: Could not find request transport: xen 04:22:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000000)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x0e\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') accept4$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000280)=0x60, 0x800) [ 240.316810][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.328290][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.344594][ T8664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.376639][ T8672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.385183][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.411567][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.421683][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.430861][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.439372][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.446448][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.454232][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.462973][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.471938][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.479083][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.489059][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.511781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.526320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.557495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 04:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup2(r0, r1) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x3ff, 0x100082) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000380)) r7 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x3fc) r8 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0xa8, 0x1c, 0x8, 0x70bd2c, 0x25dfdbfc, {0x15}, [@generic="da368cf80c53011c81232a98e5c8a6983fba899e855104c9fbc270ff7ad4046232", @generic="e4b60a7990192b4093f3f4149f23ac1195e1472afb2648a425e0de058b579c12c08410d140efe5f1aeeabe5b956b6e7a7814cf786b9c1b146343b902bf11c43cf43ddc812ed94e724208bcdeeeb1b37fff107aaf0e8d87af30d4ea9ab1bf836ea79b6c576f118bea7f55f2c93cbc8ffc9d4d"]}, 0xa8}, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) pwritev(r7, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) write$binfmt_elf64(r6, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xa4, 0x3, 0xd7, 0xffffffffffff7fff, 0x3, 0x6, 0xbca, 0x1d0, 0x40, 0x1f4, 0x1000, 0x8, 0x38, 0x1, 0x0, 0x1, 0x39f}, [{0x0, 0x8, 0x7c, 0x7, 0x7f, 0x4, 0x2, 0x3f}, {0x70000007, 0x2, 0x0, 0x3, 0xffff, 0x9, 0x80000000, 0x18000}], "578b7b954671bc90d570383868ef6db5e2b0395bfeceb343b5b58667c0ad46bc45bcace5acff0733899edabfda64db96923a800722dc320a01298d2aab3d485018d7b087f1f4b37724b826c3e4d088c60ebf45f8f4117886f33725b3e1807e0a0e8e61a44e757c7508b39b2434346b8e421769bc0a46743958d985d39c5e5910024cb82875b912ff9481c2d4eac61c0fb4913098224ffdbd97", [[], [], [], [], [], [], []]}, 0x849) sendfile(r6, r6, 0x0, 0x40fdf) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r10 = dup2(r5, r9) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f00000010c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xa66ce6903e9b9fc3}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40060}, 0x10) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r11, r13) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c010000290074ee28bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="fffff3ff0c000a0007000f000800010061746d00b80002000800040005000580080004000800ebff08000400e0ff040008000100", @ANYRES32=r4, @ANYBLOB="18000300cf76f74cf0832cbc4db4937345793642f78f000008000100", @ANYRES32=r9, @ANYBLOB="2c0003008bf1e3dc4bf81e723fff90466c0925a90832fad6652a77e122ee59f84bf1affed5d2159d76320f00400003009dbb30451faae453a84a9f3d135b2a78b629ca8b6a1897fa32a5ee659bc3c1874ef25bc85bc815c135b6ce917c7fd4337f950c436f7731da7415000008000400f0ff000008000100647272000c00020008000100200000000c000100686673630000000034000200100002003f00000005000000be0d0000100003000180ffff41f8ffffff010000100002000300000009000000000000000800010061746d002400020008000400a6b6e2ff08000100", @ANYRES32=r13, @ANYBLOB="080004001400060008000300871d8c4608000500e5020000080005006e01000008000500c1010000"], 0x17c}}, 0x4000800) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1, 0x0) [ 240.570411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.584489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.593516][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.609031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.672348][ T8672] 8021q: adding VLAN 0 to HW filter on device team0 04:22:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0004001000010400000000000000000000000093ecd54a5327f534229728d16cc51c8664dc369bcd3f3df496c5264b41e2a40cc519aa74d28157575df01463523ecb6ae2d9adfba6de17de0152cf8cbefd649fcebcf38ebca563265f9d731fde83dceae2e5c821d46fc3be5d487bae0153b5cfae9a14268b076ac1ff7a9d417a59fac1c5057d84f76758fb39078b4d537fac90edd84ac1d2519db8de642f029775f1b05c39e7418f3bd3928ed1cc2570051d231000000000000012ad2f3264a797ebe0ff966d74743c1df6d2f66d3e226d5fa496cf4a93921d2a9a60f5db7e85600ba5a48b61ceb3d62d2d668c9790598132deed07d5c51bd0b75367b4d944f5346a1c400d602eb9c70239207bc57afbfcb62ee733b12a7e9b1ed1ac45f8beed5c38ce5c0b47bc5a54930faebefc2da5d485195ca5dcede2993bbbcdc5164205", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080000000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xd3, 0x0) [ 240.718216][ T8669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.743387][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 04:22:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff0e) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "373e590e5bf90331", "41a29bde34220d9f664904310de6f354", "cf2c9aad", "00006f46827b00"}, 0x28) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 240.764157][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.778284][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.818332][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.845638][ T8666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.909970][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.955692][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.976624][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.012729][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.035857][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.047483][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.054707][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.070873][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.079785][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.088780][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.095880][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.104123][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.112146][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.129640][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.151072][ T8669] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.158202][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.166641][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.208025][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.217123][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.227126][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.248993][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.257514][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.266126][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.274633][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.284988][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.292826][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 04:22:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup2(r0, r1) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x3ff, 0x100082) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000380)) r7 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x3fc) r8 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0xa8, 0x1c, 0x8, 0x70bd2c, 0x25dfdbfc, {0x15}, [@generic="da368cf80c53011c81232a98e5c8a6983fba899e855104c9fbc270ff7ad4046232", @generic="e4b60a7990192b4093f3f4149f23ac1195e1472afb2648a425e0de058b579c12c08410d140efe5f1aeeabe5b956b6e7a7814cf786b9c1b146343b902bf11c43cf43ddc812ed94e724208bcdeeeb1b37fff107aaf0e8d87af30d4ea9ab1bf836ea79b6c576f118bea7f55f2c93cbc8ffc9d4d"]}, 0xa8}, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) pwritev(r7, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) write$binfmt_elf64(r6, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xa4, 0x3, 0xd7, 0xffffffffffff7fff, 0x3, 0x6, 0xbca, 0x1d0, 0x40, 0x1f4, 0x1000, 0x8, 0x38, 0x1, 0x0, 0x1, 0x39f}, [{0x0, 0x8, 0x7c, 0x7, 0x7f, 0x4, 0x2, 0x3f}, {0x70000007, 0x2, 0x0, 0x3, 0xffff, 0x9, 0x80000000, 0x18000}], "578b7b954671bc90d570383868ef6db5e2b0395bfeceb343b5b58667c0ad46bc45bcace5acff0733899edabfda64db96923a800722dc320a01298d2aab3d485018d7b087f1f4b37724b826c3e4d088c60ebf45f8f4117886f33725b3e1807e0a0e8e61a44e757c7508b39b2434346b8e421769bc0a46743958d985d39c5e5910024cb82875b912ff9481c2d4eac61c0fb4913098224ffdbd97", [[], [], [], [], [], [], []]}, 0x849) sendfile(r6, r6, 0x0, 0x40fdf) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r10 = dup2(r5, r9) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f00000010c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xa66ce6903e9b9fc3}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40060}, 0x10) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r11, r13) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c010000290074ee28bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="fffff3ff0c000a0007000f000800010061746d00b80002000800040005000580080004000800ebff08000400e0ff040008000100", @ANYRES32=r4, @ANYBLOB="18000300cf76f74cf0832cbc4db4937345793642f78f000008000100", @ANYRES32=r9, @ANYBLOB="2c0003008bf1e3dc4bf81e723fff90466c0925a90832fad6652a77e122ee59f84bf1affed5d2159d76320f00400003009dbb30451faae453a84a9f3d135b2a78b629ca8b6a1897fa32a5ee659bc3c1874ef25bc85bc815c135b6ce917c7fd4337f950c436f7731da7415000008000400f0ff000008000100647272000c00020008000100200000000c000100686673630000000034000200100002003f00000005000000be0d0000100003000180ffff41f8ffffff010000100002000300000009000000000000000800010061746d002400020008000400a6b6e2ff08000100", @ANYRES32=r13, @ANYBLOB="080004001400060008000300871d8c4608000500e5020000080005006e01000008000500c1010000"], 0x17c}}, 0x4000800) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1, 0x0) [ 241.301849][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.311038][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.318095][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.367108][ T8672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.398583][ T8672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.467419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.483269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.496054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.505726][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.519240][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.535426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.556388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.566781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.573963][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.609649][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.668200][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.690300][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.707936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.718099][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.770048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.779655][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.796062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.817669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.833223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.842106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.854857][ T8669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.866902][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.879578][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.886829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.900884][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.909584][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.937905][ T8669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.946110][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.954701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 04:22:28 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0x0, 0x140, 0x0, 0x378, 0x250, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x5, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'teql0\x00'}, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @empty, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @broadcast, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x3) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = gettid() perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x7, 0x69, 0x0, 0x86, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x750be9bd21a9698e}, 0x0, 0x0, 0x101, 0x10, 0x0, 0x0, 0x8001}, r2, 0x0, 0xffffffffffffffff, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000300)={{0x0, 0x6, 0x9, 0x4ec, 'syz1\x00', 0xfffffffc}, 0x4, 0x0, 0x7fffffff, r2, 0x2, 0x8000, 'syz1\x00', &(0x7f0000000080)=['eth0systemGPLmime_type%$\x00', 'user\x00'], 0x1e, [], [0x40, 0x4, 0x0, 0xfffc]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000002f000500d25a80648c63940d0200fc001000034002000000053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) bind(r4, &(0x7f0000000200)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR], 0x1}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0, 0x0, 0x0]}, &(0x7f000095dffc)=0xfffffffffffffd28) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0xed8, 0x9, 0x8000, 0x1f, 0x9, 0x2, 0xb6, 0x9206}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0xffff, 0x31fa, 0xc87, 0xffffffff}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000002c0)={r8, 0x1, 0x10}, &(0x7f00000008c0)=0xc) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 242.131972][ T8763] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 242.292248][ T8774] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 242.318230][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 242.318243][ T26] audit: type=1800 audit(1574828549.206:31): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16532 res=0 04:22:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080000000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xd3, 0x0) 04:22:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}]}, 0x3c}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r6 = socket(0xa, 0x3, 0x8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000700)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @null, @rose, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r7, 0x0) r8 = accept(r7, 0x0, 0x0) write$binfmt_elf64(r8, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0x1, 'dummy0\x00'}) r9 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = gettid() sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r10, @ANYRESDEC=r11]], 0xfffffffffffffe56}}, 0x20004850) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000005070000008628d09adfd301e76bcb6b0d573a2505b1a10023d314ca14247477e66f3957613476b777c70dfca577e3", @ANYRES32=r17, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lapb0\x00', r17}) recvfrom$packet(r4, &(0x7f0000000180)=""/87, 0x57, 0x1, &(0x7f0000000380)={0x11, 0x19, r18, 0x1, 0x9}, 0x14) 04:22:29 executing program 1: syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="c4315dfb0dc33441e909986a2da81c26d8be205298013bbd811d7499f109603e035f8464f2de1891734ff5e63f0a4e131283a1b3708b78f2fca559687b5e186889deb179f1eb3d1c6e8b7ca3195a551c502c9695dcb6b755a22a0227197b2b93a9fa9e870639d5d0357f90daacd09f84a6170c"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000400)) fchown(r0, r3, r4) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1}) ptrace(0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 04:22:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x12001, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="4f3e41b5b0e62974f2a92bf4f669e99bf660401bd8b0e8141db87bb3662d38024e9e461419e30e92012917dd643aa5bf1aed71062bf296b3eb2e98301832f28fd16238e6c025294cf41bb1cd0940a34b4c4eb38ee3b0f1ee134ae0fad43f031d", 0x4d}, {&(0x7f0000000100)="cfb3edc4670f13f0d85e730d6be4cd0ddc71ec4a07b49664ba579bd7efb6a5e796c80d6137e0de05f16cf508ccd8074037448fc69c6a0a74eba95a66bc0fa2eded2640b6ec8b65838b88bbe6459f666a079dae270e3e9e8e", 0x435}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 04:22:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) statfs(&(0x7f0000000800)='./bus\x00', &(0x7f0000000840)=""/81) getpid() r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=0x0}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x101000, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000780)=0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000007c0)=0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) syz_mount_image$ntfs(&(0x7f00000005c0)='ntfs\x00', &(0x7f0000000600)='./file0\x00', 0x10001, 0x2, &(0x7f0000000740)=[{&(0x7f0000000640)="1e5c61736651978a13028e469091f8ac2c53c7c1888cd0407b62a1d043cc9d53", 0x20, 0x7}, {&(0x7f0000000680)="ace55d41ec67fe286039936e4e73759db6180914c1bdd869be947a3a301332a6060c5c0c3dd1fdab2a8e713dcf8464d2a5c854f8ebdb4b5030eb02f8b007c3d46758dfea90aa539bd250bd6bc0358ef10b537599a8f8266ac7009fa96442433bf86b0ad9e567415e6a6418eed344ed24847549bde804f6a977d060dad120b395b86cb5ee0e540f0a5dd3190ea6", 0x8d, 0x1}], 0x0, &(0x7f0000000c80)={[{@disable_sparse_no='disable_sparse=no'}, {@umask={'umask', 0x3d, 0x7f}}, {@case_sensitive_no='case_sensitive=no'}, {@errors_recover='errors=recover'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'sit0\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz1\x00'}}, {@obj_type={'obj_type', 0x3d, 'cpuset]vboxnet1wlan0wlan0]GPL'}}, {@uid_eq={'uid', 0x3d, r5}}, {@fowner_gt={'fowner>', r6}}]}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) r7 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x120}], 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0xfff) r8 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, 0x0}], 0x1, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000040)=""/35, 0x23, 0x40, &(0x7f0000000500)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) r9 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f0000000580)=0x3) 04:22:29 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x2200) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0xa, 0x1}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x0, 0x1}) [ 242.572973][ T8800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.612551][ T8806] hfsplus: invalid session number or type of track [ 242.620090][ T8806] hfsplus: unable to find HFS+ superblock 04:22:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}]}, 0x3c}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r6 = socket(0xa, 0x3, 0x8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000700)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @null, @rose, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r7, 0x0) r8 = accept(r7, 0x0, 0x0) write$binfmt_elf64(r8, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0x1, 'dummy0\x00'}) r9 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = gettid() sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r10, @ANYRESDEC=r11]], 0xfffffffffffffe56}}, 0x20004850) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000005070000008628d09adfd301e76bcb6b0d573a2505b1a10023d314ca14247477e66f3957613476b777c70dfca577e3", @ANYRES32=r17, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lapb0\x00', r17}) recvfrom$packet(r4, &(0x7f0000000180)=""/87, 0x57, 0x1, &(0x7f0000000380)={0x11, 0x19, r18, 0x1, 0x9}, 0x14) [ 242.776793][ T8804] input: syz1 as /devices/virtual/input/input5 [ 242.884150][ T8811] ntfs: (device loop5): parse_options(): Unrecognized mount option fowner. [ 242.924828][ T8824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.954438][ T8811] ntfs: (device loop5): parse_options(): Unrecognized mount option subj_role. 04:22:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x80, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='rfat\x00', &(0x7f00000001c0)='./file0\x00', 0x800000000e000, 0x0, &(0x7f0000000180), 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x800002, 0x110, r0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7fff) open(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)={0xde, 0x29, 0x2, {0xa, [{{0x20, 0x3}, 0x66dd, 0x2, 0x5, './bus'}, {{0x4, 0x4, 0x3}, 0x9, 0x3, 0x5, './bus'}, {{0xa1, 0x2, 0x1}, 0x200, 0x2, 0x7, './file0'}, {{0x0, 0x1}, 0xffff, 0x28, 0x7, './file0'}, {{0x80, 0x4, 0x2}, 0x7ff, 0xd2, 0x7, './file0'}, {{0x3, 0x2, 0x7}, 0x6, 0x1f, 0x7, './file0'}, {{0x22, 0x4}, 0x2, 0x81, 0x5, './bus'}]}}, 0xde) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x10, 0xffffffffffffffff, 0x9) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:22:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}]}, 0x3c}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r6 = socket(0xa, 0x3, 0x8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000700)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @null, @rose, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r7, 0x0) r8 = accept(r7, 0x0, 0x0) write$binfmt_elf64(r8, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0x1, 'dummy0\x00'}) r9 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = gettid() sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r10, @ANYRESDEC=r11]], 0xfffffffffffffe56}}, 0x20004850) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000005070000008628d09adfd301e76bcb6b0d573a2505b1a10023d314ca14247477e66f3957613476b777c70dfca577e3", @ANYRES32=r17, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lapb0\x00', r17}) recvfrom$packet(r4, &(0x7f0000000180)=""/87, 0x57, 0x1, &(0x7f0000000380)={0x11, 0x19, r18, 0x1, 0x9}, 0x14) [ 243.117572][ T8804] input: syz1 as /devices/virtual/input/input6 [ 243.187398][ T8811] ntfs: (device loop5): parse_options(): Unrecognized mount option fowner. [ 243.207779][ T8837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.224047][ T8811] ntfs: (device loop5): parse_options(): Unrecognized mount option subj_role. 04:22:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0004001000010400000000000000000000000093ecd54a5327f534229728d16cc51c8664dc369bcd3f3df496c5264b41e2a40cc519aa74d28157575df01463523ecb6ae2d9adfba6de17de0152cf8cbefd649fcebcf38ebca563265f9d731fde83dceae2e5c821d46fc3be5d487bae0153b5cfae9a14268b076ac1ff7a9d417a59fac1c5057d84f76758fb39078b4d537fac90edd84ac1d2519db8de642f029775f1b05c39e7418f3bd3928ed1cc2570051d231000000000000012ad2f3264a797ebe0ff966d74743c1df6d2f66d3e226d5fa496cf4a93921d2a9a60f5db7e85600ba5a48b61ceb3d62d2d668c9790598132deed07d5c51bd0b75367b4d944f5346a1c400d602eb9c70239207bc57afbfcb62ee733b12a7e9b1ed1ac45f8beed5c38ce5c0b47bc5a54930faebefc2da5d485195ca5dcede2993bbbcdc5164205", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080000000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xd3, 0x0) [ 243.390315][ T8817] ================================================================== [ 243.398643][ T8817] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200 [ 243.407087][ T8817] Read of size 4 at addr ffff88809fda8080 by task syz-executor.1/8817 [ 243.415238][ T8817] [ 243.417580][ T8817] CPU: 0 PID: 8817 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 243.425849][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.435913][ T8817] Call Trace: [ 243.439287][ T8817] dump_stack+0x197/0x210 [ 243.443637][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 243.450001][ T8817] print_address_description.constprop.0.cold+0xd4/0x30b [ 243.450027][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 243.450047][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 243.450059][ T8817] __kasan_report.cold+0x1b/0x41 [ 243.450079][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 243.474335][ T8817] kasan_report+0x12/0x20 [ 243.474352][ T8817] check_memory_region+0x134/0x1a0 [ 243.474370][ T8817] __kasan_check_read+0x11/0x20 [ 243.474388][ T8817] refcount_inc_not_zero_checked+0x81/0x200 [ 243.474404][ T8817] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 243.474430][ T8817] ? __kasan_check_write+0x14/0x20 [ 243.511622][ T8817] refcount_inc_checked+0x17/0x70 [ 243.516727][ T8817] nr_release+0x62/0x3e0 [ 243.521164][ T8817] __sock_release+0xce/0x280 [ 243.525774][ T8817] sock_close+0x1e/0x30 [ 243.529946][ T8817] __fput+0x2ff/0x890 [ 243.533941][ T8817] ? __sock_release+0x280/0x280 [ 243.538811][ T8817] ____fput+0x16/0x20 [ 243.542845][ T8817] task_work_run+0x145/0x1c0 [ 243.547445][ T8817] exit_to_usermode_loop+0x316/0x380 [ 243.552746][ T8817] do_syscall_64+0x65f/0x760 [ 243.557387][ T8817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.563372][ T8817] RIP: 0033:0x45a649 [ 243.567276][ T8817] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.587007][ T8817] RSP: 002b:00007f83640aec78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 243.595429][ T8817] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 000000000045a649 [ 243.603418][ T8817] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 243.611403][ T8817] RBP: 000000000075c118 R08: 0000000020000200 R09: 0000000000000000 [ 243.619384][ T8817] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f83640af6d4 [ 243.627365][ T8817] R13: 00000000004c80a4 R14: 00000000004de238 R15: 00000000ffffffff [ 243.635359][ T8817] 04:22:30 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) select(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4}, 0x0) pipe(&(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 243.637692][ T8817] Allocated by task 8808: [ 243.642035][ T8817] save_stack+0x23/0x90 [ 243.646196][ T8817] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 243.651835][ T8817] kasan_kmalloc+0x9/0x10 [ 243.656172][ T8817] __kmalloc+0x163/0x770 [ 243.660479][ T8817] sk_prot_alloc+0x23a/0x310 [ 243.665082][ T8817] sk_alloc+0x39/0xf40 [ 243.665099][ T8817] nr_create+0xb9/0x5e0 [ 243.673308][ T8817] __sock_create+0x3d8/0x730 [ 243.677895][ T8817] __sys_socket+0x103/0x220 [ 243.677909][ T8817] __x64_sys_socket+0x73/0xb0 [ 243.677924][ T8817] do_syscall_64+0xfa/0x760 04:22:30 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x2200) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0xa, 0x1}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x0, 0x1}) [ 243.677940][ T8817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.677945][ T8817] [ 243.677952][ T8817] Freed by task 8797: [ 243.677968][ T8817] save_stack+0x23/0x90 [ 243.677978][ T8817] __kasan_slab_free+0x102/0x150 [ 243.677995][ T8817] kasan_slab_free+0xe/0x10 [ 243.717358][ T8817] kfree+0x10a/0x2c0 [ 243.721267][ T8817] __sk_destruct+0x4aa/0x680 [ 243.725853][ T8817] sk_destruct+0xd5/0x110 [ 243.730181][ T8817] __sk_free+0xfb/0x360 [ 243.734336][ T8817] sk_free+0x42/0x50 [ 243.738315][ T8817] nr_release+0x356/0x3e0 [ 243.742684][ T8817] __sock_release+0xce/0x280 [ 243.747277][ T8817] sock_close+0x1e/0x30 [ 243.751444][ T8817] __fput+0x2ff/0x890 [ 243.751458][ T8817] ____fput+0x16/0x20 [ 243.751473][ T8817] task_work_run+0x145/0x1c0 [ 243.751488][ T8817] exit_to_usermode_loop+0x316/0x380 [ 243.751502][ T8817] do_syscall_64+0x65f/0x760 [ 243.751517][ T8817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.751527][ T8817] [ 243.759463][ T8817] The buggy address belongs to the object at ffff88809fda8000 04:22:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}]}, 0x3c}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0), 0xfe10) r6 = socket(0xa, 0x3, 0x8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000700)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @null, @rose, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r7, 0x0) r8 = accept(r7, 0x0, 0x0) write$binfmt_elf64(r8, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0x1, 'dummy0\x00'}) r9 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = gettid() sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r10, @ANYRESDEC=r11]], 0xfffffffffffffe56}}, 0x20004850) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000005070000008628d09adfd301e76bcb6b0d573a2505b1a10023d314ca14247477e66f3957613476b777c70dfca577e3", @ANYRES32=r17, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lapb0\x00', r17}) recvfrom$packet(r4, &(0x7f0000000180)=""/87, 0x57, 0x1, &(0x7f0000000380)={0x11, 0x19, r18, 0x1, 0x9}, 0x14) [ 243.759463][ T8817] which belongs to the cache kmalloc-2k of size 2048 [ 243.759475][ T8817] The buggy address is located 128 bytes inside of [ 243.759475][ T8817] 2048-byte region [ffff88809fda8000, ffff88809fda8800) [ 243.759480][ T8817] The buggy address belongs to the page: [ 243.759495][ T8817] page:ffffea00027f6a00 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 243.759515][ T8817] raw: 01fffc0000000200 ffffea00023a8d48 ffffea000286d2c8 ffff8880aa400e00 [ 243.759532][ T8817] raw: 0000000000000000 ffff88809fda8000 0000000100000001 0000000000000000 [ 243.759538][ T8817] page dumped because: kasan: bad access detected [ 243.759542][ T8817] [ 243.759546][ T8817] Memory state around the buggy address: [ 243.759556][ T8817] ffff88809fda7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 243.759582][ T8817] ffff88809fda8000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.759592][ T8817] >ffff88809fda8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.759597][ T8817] ^ [ 243.759619][ T8817] ffff88809fda8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.892436][ T8817] ffff88809fda8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.902217][ T8817] ================================================================== [ 243.910262][ T8817] Disabling lock debugging due to kernel taint [ 243.922634][ T8817] Kernel panic - not syncing: panic_on_warn set ... [ 243.929277][ T8817] CPU: 0 PID: 8817 Comm: syz-executor.1 Tainted: G B 5.4.0-syzkaller #0 [ 243.939063][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.949110][ T8817] Call Trace: [ 243.952394][ T8817] dump_stack+0x197/0x210 [ 243.956716][ T8817] panic+0x2e3/0x75c [ 243.960590][ T8817] ? add_taint.cold+0x16/0x16 [ 243.965259][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 243.971320][ T8817] ? preempt_schedule+0x4b/0x60 [ 243.976175][ T8817] ? ___preempt_schedule+0x16/0x20 [ 243.981279][ T8817] ? trace_hardirqs_on+0x5e/0x240 [ 243.986285][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 243.992335][ T8817] end_report+0x47/0x4f [ 243.996475][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 244.002522][ T8817] __kasan_report.cold+0xe/0x41 [ 244.007359][ T8817] ? refcount_inc_not_zero_checked+0x81/0x200 [ 244.013409][ T8817] kasan_report+0x12/0x20 [ 244.017717][ T8817] check_memory_region+0x134/0x1a0 [ 244.022806][ T8817] __kasan_check_read+0x11/0x20 [ 244.027635][ T8817] refcount_inc_not_zero_checked+0x81/0x200 [ 244.033509][ T8817] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 244.039298][ T8817] ? __kasan_check_write+0x14/0x20 [ 244.044390][ T8817] refcount_inc_checked+0x17/0x70 [ 244.049397][ T8817] nr_release+0x62/0x3e0 [ 244.053626][ T8817] __sock_release+0xce/0x280 [ 244.058208][ T8817] sock_close+0x1e/0x30 [ 244.062354][ T8817] __fput+0x2ff/0x890 [ 244.066378][ T8817] ? __sock_release+0x280/0x280 [ 244.071233][ T8817] ____fput+0x16/0x20 [ 244.075207][ T8817] task_work_run+0x145/0x1c0 [ 244.079828][ T8817] exit_to_usermode_loop+0x316/0x380 [ 244.085096][ T8817] do_syscall_64+0x65f/0x760 [ 244.089668][ T8817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.095546][ T8817] RIP: 0033:0x45a649 [ 244.099433][ T8817] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.119029][ T8817] RSP: 002b:00007f83640aec78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 244.127420][ T8817] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 000000000045a649 [ 244.135370][ T8817] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 244.143336][ T8817] RBP: 000000000075c118 R08: 0000000020000200 R09: 0000000000000000 [ 244.151315][ T8817] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f83640af6d4 [ 244.159266][ T8817] R13: 00000000004c80a4 R14: 00000000004de238 R15: 00000000ffffffff [ 244.168534][ T8817] Kernel Offset: disabled [ 244.172859][ T8817] Rebooting in 86400 seconds..