[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.28' (ECDSA) to the list of known hosts. 2020/07/08 10:17:26 fuzzer started 2020/07/08 10:17:26 dialing manager at 10.128.0.26:34135 2020/07/08 10:17:27 syscalls: 2947 2020/07/08 10:17:27 code coverage: enabled 2020/07/08 10:17:27 comparison tracing: enabled 2020/07/08 10:17:27 extra coverage: enabled 2020/07/08 10:17:27 setuid sandbox: enabled 2020/07/08 10:17:27 namespace sandbox: enabled 2020/07/08 10:17:27 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/08 10:17:27 fault injection: enabled 2020/07/08 10:17:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/08 10:17:27 net packet injection: enabled 2020/07/08 10:17:27 net device setup: enabled 2020/07/08 10:17:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/08 10:17:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/08 10:17:27 USB emulation: enabled 10:19:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) syzkaller login: [ 197.301587][ T6810] IPVS: ftp: loaded support on port[0] = 21 10:19:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pipe(&(0x7f0000000000)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="02f6a4c9f2f189f7e46e0bb17d4444561934d6d91c16cf3f811777fab940916dbc1165c1", 0x24}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) sendto(0xffffffffffffffff, &(0x7f00000000c0)='J', 0x1, 0x0, 0x0, 0x0) [ 197.459630][ T6810] chnl_net:caif_netlink_parms(): no params data found [ 197.565697][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.597389][ T6940] IPVS: ftp: loaded support on port[0] = 21 [ 197.597700][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.627783][ T6810] device bridge_slave_0 entered promiscuous mode [ 197.651730][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.660855][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.671023][ T6810] device bridge_slave_1 entered promiscuous mode [ 197.729009][ T6810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.754172][ T6810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:19:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x8, 0x0, &(0x7f0000000000), 0x0) [ 197.828751][ T6810] team0: Port device team_slave_0 added [ 197.844544][ T6810] team0: Port device team_slave_1 added [ 197.866718][ T6940] chnl_net:caif_netlink_parms(): no params data found [ 197.961007][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.968516][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.978593][ T7075] IPVS: ftp: loaded support on port[0] = 21 [ 198.026384][ T6810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.049148][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.056130][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.084405][ T6810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 10:19:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000140)="11", 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000001440)=""/4084, 0xff4, 0x40000162, 0x0, 0x0) [ 198.219908][ T6810] device hsr_slave_0 entered promiscuous mode [ 198.276568][ T6810] device hsr_slave_1 entered promiscuous mode [ 198.403891][ T7128] IPVS: ftp: loaded support on port[0] = 21 [ 198.410228][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.418341][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.427315][ T6940] device bridge_slave_0 entered promiscuous mode [ 198.445628][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.453378][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.464589][ T6940] device bridge_slave_1 entered promiscuous mode 10:19:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4e", 0xa3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 198.645598][ T7201] IPVS: ftp: loaded support on port[0] = 21 [ 198.692051][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.756616][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.765860][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 198.889725][ T6940] team0: Port device team_slave_0 added [ 198.921245][ T6940] team0: Port device team_slave_1 added 10:19:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netfilter\x00') fchdir(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000740)="66530700163da682530c0000053c27bc3376003639405cb4aed12f0040001500ae47a825d86800278dcff47df5bf00805acf4f8f36460204002479aed75d492b415bcee00a9fc0ebf8b0b14f2ac662f901371b884bee22df71c6", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) [ 199.015740][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.023251][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.050368][ T6940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.067483][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.074455][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.102419][ T6940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.154400][ T6810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.188693][ T7416] IPVS: ftp: loaded support on port[0] = 21 [ 199.209086][ T6810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.295936][ T6810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.368778][ T7128] chnl_net:caif_netlink_parms(): no params data found [ 199.398605][ T6810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.511964][ T6940] device hsr_slave_0 entered promiscuous mode [ 199.566880][ T6940] device hsr_slave_1 entered promiscuous mode [ 199.626379][ T6940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.634100][ T6940] Cannot create hsr debugfs directory [ 199.640488][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.647926][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.655614][ T7075] device bridge_slave_0 entered promiscuous mode [ 199.674025][ T7201] chnl_net:caif_netlink_parms(): no params data found [ 199.703636][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.711876][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.720184][ T7075] device bridge_slave_1 entered promiscuous mode [ 199.751348][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.793529][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.868938][ T7075] team0: Port device team_slave_0 added [ 199.900935][ T7075] team0: Port device team_slave_1 added [ 199.931261][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.940599][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.950016][ T7128] device bridge_slave_0 entered promiscuous mode [ 199.966255][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.973703][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.984627][ T7128] device bridge_slave_1 entered promiscuous mode [ 200.011124][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.018446][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.045510][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.057341][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.064402][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.072960][ T7201] device bridge_slave_0 entered promiscuous mode [ 200.085939][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.094006][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.102740][ T7201] device bridge_slave_1 entered promiscuous mode [ 200.125171][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.135864][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.165875][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.196936][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.211666][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.264227][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.279754][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.312363][ T7128] team0: Port device team_slave_0 added [ 200.349760][ T7128] team0: Port device team_slave_1 added [ 200.407211][ T7201] team0: Port device team_slave_0 added [ 200.452273][ T7075] device hsr_slave_0 entered promiscuous mode [ 200.496699][ T7075] device hsr_slave_1 entered promiscuous mode [ 200.536324][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.544504][ T7075] Cannot create hsr debugfs directory [ 200.551482][ T6940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.604687][ T6940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.681525][ T6940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.730108][ T7201] team0: Port device team_slave_1 added [ 200.760239][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 200.770804][ T6940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.822261][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.829280][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.855882][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.885941][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.893253][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.920516][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.939518][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.950156][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.977124][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.013783][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.023736][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.052892][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.139301][ T7201] device hsr_slave_0 entered promiscuous mode [ 201.176677][ T7201] device hsr_slave_1 entered promiscuous mode [ 201.226301][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.233886][ T7201] Cannot create hsr debugfs directory [ 201.290652][ T7128] device hsr_slave_0 entered promiscuous mode [ 201.347736][ T7128] device hsr_slave_1 entered promiscuous mode [ 201.386321][ T7128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.393920][ T7128] Cannot create hsr debugfs directory [ 201.451374][ T6810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.520105][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.527829][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.535550][ T7416] device bridge_slave_0 entered promiscuous mode [ 201.544591][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.552060][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.560870][ T7416] device bridge_slave_1 entered promiscuous mode [ 201.627758][ T6810] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.641216][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.653619][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.673059][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.682012][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.758793][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.768055][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.777192][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.784395][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.793845][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.803117][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.811843][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.819008][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.832250][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.891422][ T7416] team0: Port device team_slave_0 added [ 201.902757][ T7416] team0: Port device team_slave_1 added [ 201.910871][ T7075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.970569][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.980091][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.989248][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.998391][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.029781][ T7075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.070895][ T7075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.119550][ T7075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.188386][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.198483][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.207536][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.247034][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.255785][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.273424][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.282415][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.310949][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.329779][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.342989][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.358435][ T7201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.389236][ T7201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.460114][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.467227][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.495267][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.590343][ T7416] device hsr_slave_0 entered promiscuous mode [ 202.626623][ T7416] device hsr_slave_1 entered promiscuous mode [ 202.687994][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.695574][ T7416] Cannot create hsr debugfs directory [ 202.708294][ T7201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.748319][ T7201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.800480][ T6810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.847486][ T7128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.883525][ T7128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.965546][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.974759][ T7128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.033044][ T7128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.101301][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.112208][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.124313][ T6810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.157522][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.165432][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.210243][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.219775][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.235313][ T6940] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.301885][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.313499][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.323635][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.330812][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.339771][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.348480][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.358433][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.366819][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.374640][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.394346][ T6810] device veth0_vlan entered promiscuous mode [ 203.444637][ T6810] device veth1_vlan entered promiscuous mode [ 203.455913][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.465909][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.475529][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.485283][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.492462][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.515569][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.542886][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.551946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.561408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.603740][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.615019][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.630854][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.641907][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.652337][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.661165][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.672320][ T7416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.731242][ T6940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.742756][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.758859][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.766888][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.774867][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.785098][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.793987][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.806958][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.815625][ T7416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.908483][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.925509][ T7416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.984640][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.993820][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.002952][ T2474] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.010206][ T2474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.018313][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.027318][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.035637][ T2474] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.042749][ T2474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.050867][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.059935][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.068885][ T7416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.153837][ T6810] device veth0_macvtap entered promiscuous mode [ 204.167341][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.175759][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.187423][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.206365][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.214307][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.241969][ T6810] device veth1_macvtap entered promiscuous mode [ 204.252808][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.269947][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.279793][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.288841][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.298268][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.308267][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.333577][ T6940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.352302][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.367272][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.377639][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.389992][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.398787][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.411106][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.419622][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.426750][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.456664][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.464621][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.474405][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.500607][ T6810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.519851][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.528816][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.540148][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.549456][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.557896][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.567497][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.575813][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.582907][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.595881][ T6810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.625133][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.643728][ T7128] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.650891][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.660789][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.669643][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.678988][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.689058][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.698719][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.707847][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.717412][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.725514][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.753203][ T6940] device veth0_vlan entered promiscuous mode [ 204.793441][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.801936][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.810395][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.819719][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.828842][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.900186][ T6940] device veth1_vlan entered promiscuous mode [ 204.921133][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.929630][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.938510][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.948247][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.957177][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.964249][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.972313][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.981555][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.990281][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.997400][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.005128][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.014903][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.023725][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.092596][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.119177][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.128515][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.138414][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.147743][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.156693][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.164886][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.175413][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.184489][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.194258][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.278692][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.297756][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.305698][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.315117][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.323835][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.333961][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.342328][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.352867][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 10:19:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x40080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x10001}}, 0x18) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xd4842, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x6949647f) ioctl$KVM_SET_IRQCHIP(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, @ioapic={0xffffffff00000000, 0x0, 0x2}}) [ 205.379166][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.434725][ T6940] device veth0_macvtap entered promiscuous mode [ 205.460736][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.474763][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.478122][ T8069] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 205.492324][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 10:19:58 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x801, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x80, &(0x7f0000ffa000/0x3000)=nil, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'vxcan1\x00', {0x3}, 0xeca}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x7f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2500, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x85000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x11c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8c1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5912}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x42d64379}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x20008840) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x10001, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000340)={{0x0, 0xf9}, {0x1, 0x5c}, 0x3, 0x7, 0x3f}) [ 205.567367][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.574467][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.616581][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.625297][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.647290][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.661003][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.703125][ T7128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.720376][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.731862][ T6940] device veth1_macvtap entered promiscuous mode [ 205.759609][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.792878][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.816966][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.825086][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.858072][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.872590][ T2474] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.879864][ T2474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.910975][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.919979][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.928998][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.937999][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.000133][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.008717][ C0] hrtimer: interrupt took 49683 ns [ 206.011993][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.024801][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.035557][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.048894][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.058040][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.074104][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 206.088257][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.100495][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.112992][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.127266][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.135438][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.144231][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.153360][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.163488][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.173054][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.182289][ T2497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.199846][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 206.211718][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.223665][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.241606][ T7416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.250706][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.260342][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.270285][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.279996][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.325672][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.335062][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.435913][ T7075] device veth0_vlan entered promiscuous mode [ 206.510726][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.518350][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.525790][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.535247][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.544348][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.553157][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:19:59 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpid() ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='hsr0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='bdev\x00', 0x0) splice(r2, 0x0, r1, 0x0, 0x19c02, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000240)=0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19c02, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002dbd7000fddbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="28000300", @ANYRES32=r6, @ANYBLOB="08000100020000000c00990000000000000000000c00990009000000030000000c00990006000000ffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x90) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000400)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="000028bd7000fcdbdf2502000000580001801400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772657461703000000000000000000008000300020000001400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="4800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300000000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r4, @ANYBLOB="08000300030000006400018008000300030000000800010013cd927dd1ddcd16c280d2283b66cc6ce13a3a12d1550e546eee3bd31f7eb28460fdb1048eb4b3db7d0c8864e8e0111fd270cb49604978c001b33086047783cf1b6eccfb364f7289b13cbad0aed64a519032", @ANYRES32=r5, @ANYBLOB="140002006e72300000000000000000000000000008000300020000000800030002000000080003000400000008000100", @ANYRES32=r6, @ANYBLOB="14000200677265300000000000000000000000000800030000000000"], 0x124}}, 0x4000081) [ 206.564701][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.573409][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.669503][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.702050][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.746295][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.754766][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.800795][ T7075] device veth1_vlan entered promiscuous mode 10:19:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x1, 0x10001, {0x0, 0x2710}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "1e1b224173a83461"}}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4008840) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000004d00"/20, @ANYRES32=r1, @ANYBLOB="000000000000ffff00000000280008801c000100000547000600000000000000132d0000ffff00000200000008000200000b00000b000100636c736163740000"], 0x58}}, 0x0) 10:19:59 executing program 0: r0 = socket(0xf, 0x3, 0x7) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) [ 206.887523][ T7201] device veth0_vlan entered promiscuous mode [ 206.902766][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.914980][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.931210][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.973561][ T7201] device veth1_vlan entered promiscuous mode 10:19:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="bc"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x200, 0x70bd2a, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="cb3a3929dec59e4a245230c1045a3c87a2e3296efa", 0x15, r4) keyctl$link(0x8, 0x0, r4) r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='%\x00', r4) add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)={0x3, 0x0, "f2bd7b97d3103d5fca1615d39dd549b76e627953ae7e3cbe1eea74247f5d2c0c89854c78b61401c0"}, 0x30, r5) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x860, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x854, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2000000000000000}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3f, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x8a, 0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0) [ 207.108194][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.125506][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 10:19:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) gettid() [ 207.204789][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.223815][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.240909][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.256883][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.318662][ T7075] device veth0_macvtap entered promiscuous mode [ 207.365361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.378201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.391907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.404491][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 10:20:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000140)={0x14, r2, 0x709}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x2}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r9, 0x0, 0x10001, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x20) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a28193020600f2ffff7f01020b00000a00080002002800140000000a0005407fffffff0022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) [ 207.414728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.434441][ T7128] device veth0_vlan entered promiscuous mode [ 207.454455][ T7075] device veth1_macvtap entered promiscuous mode [ 207.494937][ T7416] device veth0_vlan entered promiscuous mode [ 207.526514][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.537126][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.558843][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.575506][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.584601][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.615835][ T7128] device veth1_vlan entered promiscuous mode [ 207.645768][ T7416] device veth1_vlan entered promiscuous mode [ 207.658387][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.682984][ T7201] device veth0_macvtap entered promiscuous mode [ 207.698226][ T8133] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.709715][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.719500][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.728365][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.736523][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.744993][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.755767][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 207.768453][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.779768][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 207.791926][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.803462][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.819880][ T7201] device veth1_macvtap entered promiscuous mode [ 207.829516][ T8135] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 207.837764][ T8135] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.847709][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.855728][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.863975][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.872671][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.894298][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 207.906563][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.918390][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 207.929222][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.940708][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.966609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.979371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.988775][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.009823][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.022075][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.033032][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.044295][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.057117][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.068377][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.080326][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.092656][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.104035][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.114426][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.127117][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.137456][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.148441][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.159957][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.224323][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.233530][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.243726][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.254993][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.264053][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.273337][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.288131][ T7416] device veth0_macvtap entered promiscuous mode [ 208.449371][ T7416] device veth1_macvtap entered promiscuous mode [ 208.462472][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.473389][ T8137] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.484811][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.526440][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.534617][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.554478][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.565154][ T7128] device veth0_macvtap entered promiscuous mode 10:20:01 executing program 0: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x723b20c3c6a5954a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r1}) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="97", 0x1}], 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x91}, 0x4c821) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}]}, 0x9c}}, 0x4000004) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/146, &(0x7f00000000c0)=0x92) [ 208.639013][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.659421][ T7128] device veth1_macvtap entered promiscuous mode [ 208.705247][ T8147] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 208.723940][ T8147] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 208.742684][ T8147] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.795227][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.826185][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.846417][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.875926][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.896424][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.907274][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.917630][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.936897][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.959507][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.982216][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.993422][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.004090][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.018179][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.028661][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.039155][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.049145][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.059625][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.069715][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.080376][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.093729][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.106351][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.118312][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.131110][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.158108][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.185937][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.197966][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.208637][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.219916][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.232388][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.255399][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.268828][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.278522][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.289129][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.298701][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.308054][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.319843][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.333051][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.343032][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.354034][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.366015][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.376804][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.386692][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.398080][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.408330][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.418849][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.430252][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.446946][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.455533][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:20:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpid() r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0)={0x9}, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2000, 0x0) [ 210.030304][ T8168] syz-executor.3 (8168) used greatest stack depth: 23096 bytes left 10:20:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x7c7, 0xb27, 0x1, 0x3f, 0x8}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r4, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe4) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x77, 0x204, 0x7ff}, 0x14) close(0xffffffffffffffff) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:20:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x0, 'netpci0\x00', {0x3}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x101}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10040100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x18, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r5, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000340)={@local, @empty}, &(0x7f00000004c0)=0xc) connect$caif(r5, &(0x7f0000000080)=@rfm={0x25, 0xe89, "62d461844956d38f5d5f192c47a5f729"}, 0x18) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pread64(r0, &(0x7f00000003c0)=""/231, 0xe7, 0x1000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400105522ff01000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 10:20:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c01ac006d6163766c616e00040002800a000571c3fc711e02e245f153f0de17ff17cd37a10b652238da55c0ea1c78b721d6616af2238ba0d5877b1a5a0b911fc5dddceaebc39d2920c1c087d1258ac066e00864a1dd0e8ef46d6e6ea8ebbcabfd0a558899c8b6f21f5fdea4348ba7d8ad89a89018e8836511590c3e7329b7a133fe9942022aa76c34c9e371e3"], 0x40}}, 0x0) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x10001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0xe0, @tick=0x6, 0x5, {0x7, 0x71}, 0x3f, 0x0, 0x2}) 10:20:04 executing program 0: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x723b20c3c6a5954a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r1}) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="97", 0x1}], 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x91}, 0x4c821) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}]}, 0x9c}}, 0x4000004) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/146, &(0x7f00000000c0)=0x92) 10:20:04 executing program 5: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000400)={0x800, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @private=0xa010101}}}, 0x104) fsopen(&(0x7f0000000100)='cgroup\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) fsopen(&(0x7f0000000100)='cgroup\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r2, 0x0, 0x10001, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x45c300) pipe(&(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="00daebc260d749f7a4f98139", @ANYRES32=r4, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x14040004}, 0x0) 10:20:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x64, 0x0, 0x2}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x2bcf) r1 = semget$private(0x0, 0x0, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000180)={{0x2}}) semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000001340)=""/237) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f00000000c0)=""/137) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x29, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 211.932681][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.957736][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.993307][ T8187] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 212.014071][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.014405][ T8187] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 212.072216][ T8187] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.0'. 10:20:04 executing program 1: openat$null(0xffffff9c, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0x405c5503, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10440, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) splice(r0, 0x0, r1, 0x0, 0x10001, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/79) 10:20:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000280)="bb129c79c969e8d22dc7f4853c6bb03ddc619506402625beb1331448ce370a9d879313504568f062f83c991c78fa9c7b1a74c06b1d43f742fd211075f94ae8fbb7b9710648e9670be1e4c120ed1c1982845b4fcf424da63b87124801383ae4c70d68a9848f60f9556ad4f5c1f41ea572f4815f54b70b474cf36f1dd773a0b75cedc0e5eb03d21a6c360a3f07bda65c23aebdb09eee45acae3754f9ebd13974817f4f9b5bc412dc39a235a8ee3b803e", 0xaf) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x2}}) semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000001340)=""/237) semctl$GETPID(r3, 0x2, 0xb, &(0x7f00000000c0)=""/209) [ 212.304647][ T8200] IPVS: ftp: loaded support on port[0] = 21 10:20:05 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000140)={0x14, r3, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fedbdf000005007400020000000600ed00110500000600360007000000050074000500"/54], 0x3c}}, 0x4) flock(r1, 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 10:20:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {}, 0x9}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0xa198) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x130, 0x0, 0x800, 0x70bd27, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x304e}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x15c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6d}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d8f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x93}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8d1a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6e}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) [ 212.784031][ T8193] __nla_validate_parse: 1 callbacks suppressed [ 212.784041][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.808617][ T8192] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @multicast2}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xa) sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @empty}, 0x10) sendto(r0, &(0x7f0000000040)='\x00', 0x1, 0x8845, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="020000000000000000000000265896a2cabb80414b24ec5e43347bd6bf88256777934fb79b7d566c14cad8f5c73ce5474701948b69300be0bd"], 0x24}}, 0x0) sendmsg$xdp(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x2c, 0x0, r6}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="aa9e3d701ce9ff8f1b8983514de5702cb71d8007604d488581eca4423f4225", 0x1f}, {&(0x7f0000000180)="58baf0411a63514f258ee794de399979ff9e7c558d1207d276739b416bc0ba459f628cee483be21d184c22f8850a9828581008ff0f970694a5944382aa940e1a369ef0623433c3ea7ff8285bdadf68ebda344ea2281d280bfa9efb97e9d9038a8c51763d718242f33236ca320a724ea1c3a957a7320b20edc51d153de6b7439ce6da976e4cf2a114f04513c229e60b6c111072f97e", 0x95}, {&(0x7f0000000240)="738e22163dd8297d8417cb79f8f3db", 0xf}, {&(0x7f0000000280)="68b5f448a387daca7b462d895a5b7fe2928ac15a0398dfa09b4a6aa8592ea1def2e897fbf1153056952e310b60e0022b692f39e586d869bcd6799fcce88f644df1d76ba0a783412ad55184f4b7abf1a57ff5fcda498a7dab17cc", 0x5a}, {&(0x7f0000000300)="ab9fb023592610a50c144741a91c85e7ca2490921340a5a0437656e9c17b0abc9c724f50af7c2d757afcd48f9a1ad1f2259fe82da4ba53ef59735ee7f82f66df7d7ce94e30bd7b99d9280a389f39243fad26b3adf588add22680a186a0394729f7a4ecf0ed7cf0baf8180e5f3d58baf64943ae67f64a4aab9f582a0af1e7093321add87632584ea1f4e7dd8802778580e08a15b53e4f609ce718eaf4c824a1739c12d0708b4e2e3b59ca9be01010d751ca70fdd939d8c3c316c15e0138da59a4785a66fb1a85bc0e07", 0xc9}], 0x5, 0x0, 0x0, 0x4000}, 0x4000001) 10:20:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x161002, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @local, 0x1}, 0x1c) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 213.105582][ T8201] IPVS: ftp: loaded support on port[0] = 21 [ 213.233786][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.253168][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 10:20:06 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000120905810300000000000904010000020d00000904010102020d00000905820200000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r2, 0x0, 0x10001, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x15, 0x8000, 0x9a9e}) 10:20:06 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016"], 0x12e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r2, 0x0, 0x10001, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) write$UHID_CREATE2(r0, 0x0, 0x119) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x5) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) [ 213.335915][ T25] tipc: TX() has been purged, node left! 10:20:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x22, 0x27, 0x401}]}}}, @IFLA_NET_NS_FD={0x0, 0x1c, r1}]}, 0x3c}}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x6) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000080)) ptrace$cont(0x18, r5, 0x0, 0x0) tkill(r5, 0x20) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fddbdf250300000008000500ac1414aa2600070073797374656d5f753a6f626a6563745f723a64627573645f657865635f743a7330000000e5ff03006401010014000600626f6e645f736c6176655f310000000008000400e00000021400060069703665727370616e30000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) [ 213.472393][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.529667][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.575309][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.602755][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.631958][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.643938][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.662979][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.680124][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.695215][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.716083][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.716132][ T3802] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 213.744416][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.807214][ T8310] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.819061][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.845723][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:20:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r1, 0x0, 0x10001, 0x0) r2 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, r2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xec02a100, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8907, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8907, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8907, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0xfffffe58) [ 213.895098][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.931876][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.958198][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.985909][ T3802] usb 6-1: Using ep0 maxpacket: 8 [ 213.990441][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.011575][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.023751][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.042133][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.072667][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.092207][ T8353] IPVS: ftp: loaded support on port[0] = 21 [ 214.102197][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.106188][ T3802] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.128862][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.152800][ T3802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.155882][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 10:20:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff99) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/130) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x400000000000004, 0x45) fcntl$dupfd(r2, 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303010303030343056093030302c757365725f69643d", @ANYRESDEC=0x0]) write$FUSE_DIRENT(r3, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="97", 0x1}], 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x91}, 0x4c821) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ce94e35}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x10, 0x5}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x68}}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000380)=0x4) [ 214.208708][ T3802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.217664][ T38] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 214.249863][ T3802] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.274830][ T38] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on sz1 [ 214.281122][ T3802] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 10:20:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r1, 0x0, 0x10001, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xf1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x18000, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="000e80000000020000dca6c5339c9678a7ff95687501"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 214.396781][ T3802] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.502259][ T8359] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 214.579045][ T8359] device geneve2 entered promiscuous mode [ 214.636414][ T3802] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.649043][ T8388] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 214.689803][ T3802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.734716][ T3802] usb 6-1: Product: syz [ 214.750320][ T3802] usb 6-1: Manufacturer: syz [ 214.760957][ T3802] usb 6-1: SerialNumber: syz [ 214.875748][ T2497] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 215.135702][ T2497] usb 5-1: Using ep0 maxpacket: 8 [ 215.276112][ T2497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.293005][ T2497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.315734][ T2497] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 215.345173][ T2497] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 215.365180][ T2497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.387297][ T2497] usb 5-1: config 0 descriptor?? [ 215.878797][ T2497] elecom 0003:056E:00FD.0002: unknown main item tag 0x0 [ 215.895567][ T2497] elecom 0003:056E:00FD.0002: invalid report_count 42872 [ 215.902632][ T2497] elecom 0003:056E:00FD.0002: item 0 2 1 9 parsing failed [ 215.935794][ T2497] elecom: probe of 0003:056E:00FD.0002 failed with error -22 10:20:08 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000140)={0x14, r2, 0x709}, 0x14}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x6) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048040) 10:20:08 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x6404c860) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a4ec9"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x11, 0x800000003, 0x0) syz_usb_disconnect(r2) fgetxattr(r4, &(0x7f00000001c0)=@random={'osx.', '#'}, &(0x7f0000000280)=""/169, 0xa9) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16], 0x0) 10:20:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff99) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/130) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x400000000000004, 0x45) fcntl$dupfd(r2, 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303010303030343056093030302c757365725f69643d", @ANYRESDEC=0x0]) write$FUSE_DIRENT(r3, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="97", 0x1}], 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x91}, 0x4c821) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ce94e35}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x10, 0x5}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x68}}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000380)=0x4) 10:20:08 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x4, 0x0, 0x41c1, 0x480, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x21009}, r0, 0xe, 0xffffffffffffffff, 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x44900, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)) socket$inet6(0xa, 0x800, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, &(0x7f00000001c0)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r6, @ANYBLOB="18001b001900dc0bce64a63d66447419583dfb3667b36ecb9ff71f38f5c20909d6fc13ecc2886c4be2cad037e2425426989acd3edf86375d6936c3bc27f230bd0924f7d605e1e7d2a3dd46d26c31ea61f966ef65ce48c9770e6064d3bba9100a7b52123b89c6484fc5b3c27d265ac5d32c4e715eafddafbd3ad0f548baea473c666d62f596aba8fcb8a81da7f8b2346de500fcffff05d72687a62ed04f2bee073ef70bd7a864ee7936f8557549c2ea798bc2c778997d589e960a9daba5d58d0e42a9070000007ec9d53d258b2e59029af6bb1a9e91ab692742fb311a6c6d9733e84fa978e10d0c5af1399cebb15c61b07c7232185a49511626f481c19719263d5bb14f0ee30f36b82a732eb084fbca7590ff9fcaf74ca0c91ee0d5905401e3ec9d6f35fcb4b07604a5d10d497b0390992ccaed4cfcd8ffe9ad25c00ce1103c093781ea84f3bb41f4ca41b9953cdef314eb84a65acf1994c887cc5f4f5a9a06a5c3e5c726194967373ce55a6a42c47190f8f2a6b52af5c219c9849c6925da15d498a671efaba77b61fe5bfc33652f4b83a928cab0c902daa0669cb011f27aef265982449ba30dd6ec2f170fd1064f55d678f9fc0355e801de4fac99191c3b4b4d3923238909fea0c3f221a5daf0d326a20b6c6c6a5ce3850af1169efb865a89031014f8421be5937792c70175bb8ee3ab024b06ba57090c6a7f40d58d2ba0f95e9a01cb7b949ce4c4597f9d7d3b05ed11d368b3d802dc2b9935f2b9408670318b1c624b9a6ea4e5b42e2175d88cea0166debe4c73b0a1d78699271611b225bb83ee632238fe4ab7ae13432e0000da69c9d6ba2226c6319e87d782d7c1899537c8199d9506873c3dd9a0e4450c143c8b2e8bc522ac00000000e5bba3f347ce507fa824e9bfa54a944de72fde3e279aaa09eb351dd7f55d40bdd6f4bb16e33d0315ebfe23f9ecc0f675b56d76a8bfc42c642d5de0bff139bed98d669c1bdb7e65d54c9f767211274ee569bde6587d7b062004e4c7389132b107215e86b2ab0e487b5b39ec328c5b"], 0x30}, 0x1, 0x81000000}, 0x0) 10:20:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0xa0800) recvmsg$can_raw(r2, 0xfffffffffffffffe, 0x2120) write$P9_RREADDIR(r0, &(0x7f0000000500)=ANY=[], 0xb) close(r1) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000150000002cbd7000fcdbdf255a044d070100a9d4f008e69bf0976419cbe79f1347608adab9f99f560848ac7465c83b8adf5e74080077c129a9983a8b724042c7b18ed31af9d0ea519056e3168dd41cf25391f9993ed6004166295f0000001eaeacb97079ee89f08681f28a0ac376088f001b000034a15628b78581f72023cd6e83c13154d200"/149], 0x84}, 0x1, 0x0, 0x0, 0x24042040}, 0x480) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x200005) sendfile(r1, r3, 0x0, 0x80001d00c0d0) umount2(&(0x7f0000000040)='./bus\x00', 0x8) 10:20:09 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000068001308000000f5c00300f501000000000000000800050fbd9331ae90d1a8be2e5e9565be21db43436e3f0a49623dc689"], 0x20}}, 0x4) r0 = socket(0x0, 0x800000000000003, 0x81) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x20000003, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x3f052c333fb6a28, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={@fixed={[], 0x12}, 0x1, 0x0, 0xc3}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000080)={0x4, 0x2}) [ 216.429208][ T8415] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 10:20:09 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup2(r3, r4) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYBLOB="f300000000000000125f3f7ccf7ef477c53a0022fb972fc00d2e667e1cd37ca50112000b6c616e00000400020008000500584fa0b66a5f85d1dfa4902b26827e3e9233f4e1320f8bc61dd8e2de1564eca40cfd42f1e9bfbafe3a7983127af144bb810f37c13f5185a5fda51dab6439bed6f143b8564da6ecc9747903f3c1afa61b2e75f7ff8d5f489d47067ec9eace79dc000000000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 10:20:09 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000001140)={0x8c, 0x0, 0x500, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0xffffffffffffffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0xfffffffffffffff7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x8044) 10:20:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$tun(r0, &(0x7f0000001980)={@val={0x0, 0x17}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x1298, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x1b, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c2f9a640b2d847d527357902538828abd66b3d1a9b85034066154f0b2ec054f6a8712ec98e5"}, {0x0, 0x1f, "8cf0833ae2772f05d302c778833be4f2b9c43c83284b82e71ca1ee382af46513079a2f52da08c93afdfc1a18e4b677b307a1c7df90787cbd143b129bc8dbc39104eb21674d26fd4ced8626df256869e168d42f4d160ad1442cae2bd8fda0fc44a08759d245bfe8eba42ec7967c1e953256a057369159333bca73b498a882fb5e840d429804169a6446c1d1b013144ae0ee276a463ef69ea4c4636751083041811c9b549256c6a3a71e451f8fd4de25629b3de61cba78315412fa14e350bb03feaf63909bd7320561df80bc77f36d4561a5efcc324450355ed398d9e46e798e23e2a4a2c787728b9c549a1894c53dcdfe834c7785fb3c4331"}, {0x0, 0x3, "6598975984c98199c07565e33783bc472344c2fc4e6a32"}, {0x0, 0x1f8, "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"}, {0x0, 0x1, "c3dc73ee76fa"}]}}}}}, 0x12ce) [ 216.585849][ T3802] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 216.592081][ T3802] cdc_ncm 6-1:1.0: bind() failure 10:20:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc2c21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x2a2db03cc56ad016}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x90000, 0x0, [0x401, 0x6, 0x0, 0x4, 0x9, 0xffffffffffff4ba8, 0x7fffffff, 0x400]}) r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x800, 0x0) sendto$inet6(r2, &(0x7f0000000280)="9c5c918a35e20a2cc215ec2e95911f0ac9562f42d1f19124fdb7e2520ff188797b36398a095f6bc8cf885b3f7b5171c776eaeee11226cf51f007cf774a5a692072684361f2974ec614c720666c7a31decf71e2384e53527d58a901638a0a488ef916385134ec8acf22d33e4265d10497a72aaef1f1e5f88f5e3cfc1aba61bfdf1322712bde5d74e9487cf9a96d5dfdc4c38a89395883a59dcd4d5aa06d7f69d8f47e3033aed1b25613ea081cb64ed867d33f709ebc2511ecdb602a379ff18cff7ea9b6b4cc8e06f2a1f124cf7000000000d538d2eb66bd03d1409ba67c7aae9877f6c4efe173d30dfe05227374e46337", 0xf0, 0x8004, &(0x7f00000003c0)={0xa, 0x2, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, 0x1c) r3 = socket(0x800000002b, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=ANY=[], 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x5d, &(0x7f0000000140), &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000006ffc)=0x40000008, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800001a00356bd25a80648c63940d0124fc60100003400a00f000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup3(r4, r0, 0x0) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x9, 0x140800) [ 216.646414][ T3802] cdc_ncm 6-1:1.1: bind() failure [ 216.672323][ T8437] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 216.689610][ T3802] usb 6-1: USB disconnect, device number 2 [ 216.705070][ T8437] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 216.705514][ T3904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 216.729048][ T8445] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 216.754971][ T8448] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 216.761893][ T8437] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.773505][ T8445] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 216.791685][ T8452] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 216.803778][ T8448] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 216.821424][ T8445] netlink: 16602 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.858200][ T8445] ================================================================== [ 216.866539][ T8445] BUG: KASAN: vmalloc-out-of-bounds in nl802154_dump_wpan_phy+0x98e/0x9c0 [ 216.875043][ T8445] Read of size 4 at addr ffffc90017f99018 by task syz-executor.3/8445 [ 216.883190][ T8445] [ 216.885535][ T8445] CPU: 1 PID: 8445 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 216.895247][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.905299][ T8445] Call Trace: [ 216.908594][ T8445] dump_stack+0x18f/0x20d [ 216.912940][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 216.918485][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 216.924030][ T8445] print_address_description.constprop.0.cold+0x5/0x436 [ 216.930971][ T8445] ? lockdep_hardirqs_off+0x66/0xa0 [ 216.936177][ T8445] ? vprintk_func+0x97/0x1a6 [ 216.940815][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 216.948011][ T8445] kasan_report.cold+0x1f/0x37 [ 216.952787][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 216.958341][ T8445] nl802154_dump_wpan_phy+0x98e/0x9c0 [ 216.963725][ T8445] ? kmem_cache_alloc_node_trace+0x3b0/0x400 [ 216.969719][ T8445] ? __kmalloc_node_track_caller+0x38/0x60 [ 216.975532][ T8445] ? nl802154_send_wpan_phy.constprop.0+0x21d0/0x21d0 [ 216.982299][ T8445] ? __phys_addr+0x9a/0x110 [ 216.986810][ T8445] ? memset+0x20/0x40 [ 216.990811][ T8445] genl_lock_dumpit+0x7f/0xb0 [ 216.995582][ T8445] netlink_dump+0x4cd/0xf60 [ 217.000095][ T8445] ? netlink_insert+0x1670/0x1670 [ 217.005214][ T8445] ? __mutex_unlock_slowpath+0xe2/0x610 [ 217.010774][ T8445] ? genl_start+0x45a/0x6e0 [ 217.015287][ T8445] __netlink_dump_start+0x643/0x900 [ 217.020510][ T8445] ? genl_rcv_msg+0x9e0/0x9e0 [ 217.025285][ T8445] ? nl802154_send_wpan_phy.constprop.0+0x21d0/0x21d0 [ 217.032086][ T8445] genl_family_rcv_msg_dumpit+0x2ac/0x310 [ 217.037810][ T8445] ? genl_rcv+0x40/0x40 [ 217.041965][ T8445] ? mutex_lock_io_nested+0xf60/0xf60 [ 217.047344][ T8445] ? genl_rcv_msg+0x9e0/0x9e0 [ 217.052032][ T8445] ? genl_unlock+0x20/0x20 [ 217.056445][ T8445] ? genl_parallel_done+0x170/0x170 [ 217.061648][ T8445] ? __radix_tree_lookup+0x1f3/0x290 [ 217.066951][ T8445] genl_rcv_msg+0x797/0x9e0 [ 217.071470][ T8445] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 217.078851][ T8445] ? lock_acquire+0x1f1/0xad0 [ 217.083537][ T8445] ? genl_rcv+0x15/0x40 [ 217.087705][ T8445] ? lock_release+0x8d0/0x8d0 [ 217.092385][ T8445] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 217.097677][ T8445] netlink_rcv_skb+0x15a/0x430 [ 217.102454][ T8445] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 217.109399][ T8445] ? netlink_ack+0xa10/0xa10 [ 217.114016][ T8445] genl_rcv+0x24/0x40 [ 217.118100][ T8445] netlink_unicast+0x533/0x7d0 [ 217.122962][ T8445] ? netlink_attachskb+0x810/0x810 [ 217.128075][ T8445] ? _copy_from_iter_full+0x247/0x890 [ 217.133454][ T8445] ? __phys_addr_symbol+0x2c/0x70 [ 217.138493][ T8445] ? __check_object_size+0x171/0x3e4 [ 217.144048][ T8445] netlink_sendmsg+0x856/0xd90 [ 217.148828][ T8445] ? netlink_unicast+0x7d0/0x7d0 [ 217.153795][ T8445] ? netlink_unicast+0x7d0/0x7d0 [ 217.158753][ T8445] sock_sendmsg+0xcf/0x120 [ 217.163183][ T8445] ____sys_sendmsg+0x6e8/0x810 [ 217.168051][ T8445] ? kernel_sendmsg+0x50/0x50 [ 217.172733][ T8445] ? do_recvmmsg+0x6d0/0x6d0 [ 217.177336][ T8445] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 217.183598][ T8445] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 217.190023][ T8445] ? __lock_acquire+0xc1e/0x56e0 [ 217.194971][ T8445] ___sys_sendmsg+0xf3/0x170 [ 217.199744][ T8445] ? sendmsg_copy_msghdr+0x160/0x160 [ 217.205043][ T8445] ? __fget_files+0x272/0x400 [ 217.209730][ T8445] ? lock_downgrade+0x820/0x820 [ 217.214614][ T8445] ? __fget_files+0x294/0x400 [ 217.219476][ T8445] ? __fget_light+0xea/0x280 [ 217.224078][ T8445] __sys_sendmsg+0xe5/0x1b0 [ 217.228672][ T8445] ? __sys_sendmsg_sock+0xb0/0xb0 [ 217.233720][ T8445] ? lock_is_held_type+0xb0/0xe0 [ 217.238663][ T8445] ? do_fast_syscall_32+0x40/0x120 [ 217.243778][ T8445] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 217.249856][ T8445] do_syscall_32_irqs_on+0x3f/0x60 [ 217.255062][ T8445] do_fast_syscall_32+0x7f/0x120 [ 217.260009][ T8445] entry_SYSENTER_compat+0x6d/0x7c [ 217.265474][ T8445] RIP: 0023:0xf7fa6569 [ 217.269530][ T8445] Code: Bad RIP value. [ 217.273590][ T8445] RSP: 002b:00000000f5d800cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 217.282009][ T8445] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 217.290777][ T8445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.298752][ T8445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.306762][ T8445] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 217.314735][ T8445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.322726][ T8445] [ 217.325051][ T8445] [ 217.327374][ T8445] Memory state around the buggy address: [ 217.333128][ T8445] ffffc90017f98f00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 217.341567][ T8445] ffffc90017f98f80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 217.349818][ T8445] >ffffc90017f99000: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 10:20:10 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) [ 217.358104][ T8445] ^ [ 217.363538][ T8445] ffffc90017f99080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 217.373916][ T8445] ffffc90017f99100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 217.382181][ T8445] ================================================================== [ 217.392522][ T8445] Disabling lock debugging due to kernel taint [ 217.407134][ T8445] Kernel panic - not syncing: panic_on_warn set ... [ 217.413772][ T8445] CPU: 1 PID: 8445 Comm: syz-executor.3 Tainted: G B 5.8.0-rc3-syzkaller #0 [ 217.424262][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.434324][ T8445] Call Trace: [ 217.437624][ T8445] dump_stack+0x18f/0x20d [ 217.442400][ T8445] ? nl802154_dump_wpan_phy+0x8b0/0x9c0 [ 217.448058][ T8445] panic+0x2e3/0x75c [ 217.451956][ T8445] ? __warn_printk+0xf3/0xf3 [ 217.456547][ T8445] ? preempt_schedule_common+0x59/0xc0 [ 217.462217][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 217.467879][ T8445] ? preempt_schedule_thunk+0x16/0x18 [ 217.473250][ T8445] ? trace_hardirqs_on+0x55/0x220 [ 217.478466][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 217.484197][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 217.489744][ T8445] end_report+0x4d/0x53 [ 217.493898][ T8445] kasan_report.cold+0xd/0x37 [ 217.498582][ T8445] ? nl802154_dump_wpan_phy+0x98e/0x9c0 [ 217.504133][ T8445] nl802154_dump_wpan_phy+0x98e/0x9c0 [ 217.509513][ T8445] ? kmem_cache_alloc_node_trace+0x3b0/0x400 [ 217.515494][ T8445] ? __kmalloc_node_track_caller+0x38/0x60 [ 217.521289][ T8445] ? nl802154_send_wpan_phy.constprop.0+0x21d0/0x21d0 [ 217.528039][ T8445] ? __phys_addr+0x9a/0x110 [ 217.532660][ T8445] ? memset+0x20/0x40 [ 217.536624][ T8445] genl_lock_dumpit+0x7f/0xb0 [ 217.541396][ T8445] netlink_dump+0x4cd/0xf60 [ 217.546196][ T8445] ? netlink_insert+0x1670/0x1670 [ 217.551214][ T8445] ? __mutex_unlock_slowpath+0xe2/0x610 [ 217.556887][ T8445] ? genl_start+0x45a/0x6e0 [ 217.561378][ T8445] __netlink_dump_start+0x643/0x900 [ 217.566566][ T8445] ? genl_rcv_msg+0x9e0/0x9e0 [ 217.571359][ T8445] ? nl802154_send_wpan_phy.constprop.0+0x21d0/0x21d0 [ 217.578104][ T8445] genl_family_rcv_msg_dumpit+0x2ac/0x310 [ 217.583810][ T8445] ? genl_rcv+0x40/0x40 [ 217.588032][ T8445] ? mutex_lock_io_nested+0xf60/0xf60 [ 217.593382][ T8445] ? genl_rcv_msg+0x9e0/0x9e0 [ 217.598151][ T8445] ? genl_unlock+0x20/0x20 [ 217.602704][ T8445] ? genl_parallel_done+0x170/0x170 [ 217.608045][ T8445] ? __radix_tree_lookup+0x1f3/0x290 [ 217.613310][ T8445] genl_rcv_msg+0x797/0x9e0 [ 217.618071][ T8445] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 217.625075][ T8445] ? lock_acquire+0x1f1/0xad0 [ 217.629822][ T8445] ? genl_rcv+0x15/0x40 [ 217.633961][ T8445] ? lock_release+0x8d0/0x8d0 [ 217.638643][ T8445] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 217.643920][ T8445] netlink_rcv_skb+0x15a/0x430 [ 217.648876][ T8445] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 217.655998][ T8445] ? netlink_ack+0xa10/0xa10 [ 217.661208][ T8445] genl_rcv+0x24/0x40 [ 217.665350][ T8445] netlink_unicast+0x533/0x7d0 [ 217.670241][ T8445] ? netlink_attachskb+0x810/0x810 [ 217.675353][ T8445] ? _copy_from_iter_full+0x247/0x890 [ 217.680740][ T8445] ? __phys_addr_symbol+0x2c/0x70 [ 217.685760][ T8445] ? __check_object_size+0x171/0x3e4 [ 217.691045][ T8445] netlink_sendmsg+0x856/0xd90 [ 217.695805][ T8445] ? netlink_unicast+0x7d0/0x7d0 [ 217.700742][ T8445] ? netlink_unicast+0x7d0/0x7d0 [ 217.706018][ T8445] sock_sendmsg+0xcf/0x120 [ 217.710542][ T8445] ____sys_sendmsg+0x6e8/0x810 [ 217.715327][ T8445] ? kernel_sendmsg+0x50/0x50 [ 217.720162][ T8445] ? do_recvmmsg+0x6d0/0x6d0 [ 217.724734][ T8445] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 217.730694][ T8445] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 217.736654][ T8445] ? __lock_acquire+0xc1e/0x56e0 [ 217.741569][ T8445] ___sys_sendmsg+0xf3/0x170 [ 217.746146][ T8445] ? sendmsg_copy_msghdr+0x160/0x160 [ 217.751418][ T8445] ? __fget_files+0x272/0x400 [ 217.756215][ T8445] ? lock_downgrade+0x820/0x820 [ 217.761087][ T8445] ? __fget_files+0x294/0x400 [ 217.765754][ T8445] ? __fget_light+0xea/0x280 [ 217.770333][ T8445] __sys_sendmsg+0xe5/0x1b0 [ 217.774814][ T8445] ? __sys_sendmsg_sock+0xb0/0xb0 [ 217.779822][ T8445] ? lock_is_held_type+0xb0/0xe0 [ 217.784914][ T8445] ? do_fast_syscall_32+0x40/0x120 [ 217.793144][ T8445] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 217.799107][ T8445] do_syscall_32_irqs_on+0x3f/0x60 [ 217.804198][ T8445] do_fast_syscall_32+0x7f/0x120 [ 217.809391][ T8445] entry_SYSENTER_compat+0x6d/0x7c [ 217.814489][ T8445] RIP: 0023:0xf7fa6569 [ 217.818791][ T8445] Code: Bad RIP value. [ 217.822837][ T8445] RSP: 002b:00000000f5d800cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 217.831488][ T8445] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 217.839442][ T8445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.847515][ T8445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.855595][ T8445] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 217.863608][ T8445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.873232][ T8445] Kernel Offset: disabled [ 217.877583][ T8445] Rebooting in 86400 seconds..