[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.137263][ T27] audit: type=1800 audit(1559602074.734:25): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.171834][ T27] audit: type=1800 audit(1559602074.734:26): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 63.193062][ T27] audit: type=1800 audit(1559602074.734:27): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. 2019/06/03 22:48:07 fuzzer started 2019/06/03 22:48:10 dialing manager at 10.128.0.26:41825 2019/06/03 22:48:10 syscalls: 1006 2019/06/03 22:48:10 code coverage: enabled 2019/06/03 22:48:10 comparison tracing: enabled 2019/06/03 22:48:10 extra coverage: extra coverage is not supported by the kernel 2019/06/03 22:48:10 setuid sandbox: enabled 2019/06/03 22:48:10 namespace sandbox: enabled 2019/06/03 22:48:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/03 22:48:10 fault injection: enabled 2019/06/03 22:48:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/03 22:48:10 net packet injection: enabled 2019/06/03 22:48:10 net device setup: enabled 22:49:35 executing program 0: syzkaller login: [ 163.590617][ T8828] IPVS: ftp: loaded support on port[0] = 21 22:49:35 executing program 1: [ 163.705487][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 163.768327][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.785937][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.812676][ T8828] device bridge_slave_0 entered promiscuous mode [ 163.832052][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.839203][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.847584][ T8828] device bridge_slave_1 entered promiscuous mode [ 163.879270][ T8828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.890458][ T8828] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.913266][ T8831] IPVS: ftp: loaded support on port[0] = 21 [ 163.925047][ T8828] team0: Port device team_slave_0 added [ 163.934367][ T8828] team0: Port device team_slave_1 added 22:49:35 executing program 2: [ 164.074794][ T8828] device hsr_slave_0 entered promiscuous mode [ 164.152143][ T8828] device hsr_slave_1 entered promiscuous mode 22:49:35 executing program 3: [ 164.246731][ T8833] IPVS: ftp: loaded support on port[0] = 21 [ 164.281509][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.288749][ T8828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.296513][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.303631][ T8828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.442660][ T8831] chnl_net:caif_netlink_parms(): no params data found [ 164.480724][ T8837] IPVS: ftp: loaded support on port[0] = 21 [ 164.514563][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.570282][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.577844][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.586985][ T8831] device bridge_slave_0 entered promiscuous mode 22:49:36 executing program 4: [ 164.618567][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.626476][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.634753][ T8831] device bridge_slave_1 entered promiscuous mode [ 164.646865][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.669328][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.683191][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.700968][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 164.721792][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.750035][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 164.828758][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.852592][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.861276][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.868399][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.876386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.885148][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.893898][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.900957][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.913356][ T8831] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.937230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.955073][ T8831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.983937][ T8841] IPVS: ftp: loaded support on port[0] = 21 [ 164.997469][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.005307][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.016813][ T8833] device bridge_slave_0 entered promiscuous mode [ 165.026735][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 22:49:36 executing program 5: [ 165.038862][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.047912][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.111831][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.119543][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.132363][ T8833] device bridge_slave_1 entered promiscuous mode [ 165.149848][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.167155][ T8831] team0: Port device team_slave_0 added [ 165.215104][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.227528][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.236117][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.244797][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.253256][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.261449][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.270934][ T8831] team0: Port device team_slave_1 added [ 165.287397][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 165.298866][ T8833] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 165.316959][ T8833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.319850][ T8845] IPVS: ftp: loaded support on port[0] = 21 [ 165.350672][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.445551][ T8831] device hsr_slave_0 entered promiscuous mode [ 165.502046][ T8831] device hsr_slave_1 entered promiscuous mode [ 165.588388][ T8833] team0: Port device team_slave_0 added [ 165.595792][ T8833] team0: Port device team_slave_1 added [ 165.713936][ T8833] device hsr_slave_0 entered promiscuous mode [ 165.761997][ T8833] device hsr_slave_1 entered promiscuous mode [ 165.853079][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.860409][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.868036][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.876397][ T8837] device bridge_slave_0 entered promiscuous mode [ 165.929023][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.936752][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.945242][ T8837] device bridge_slave_1 entered promiscuous mode [ 165.971093][ T8837] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 165.995584][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 166.016442][ T8837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 166.063498][ T8837] team0: Port device team_slave_0 added [ 166.070938][ T8837] team0: Port device team_slave_1 added 22:49:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000480), &(0x7f00000004c0)=0xe, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000500)=0x3ff, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x5, 0x7fffffff, 0x1}, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1002, 0x4) 22:49:37 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x3c) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000000), 0x4) [ 166.201312][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.228347][ T8837] device hsr_slave_0 entered promiscuous mode [ 166.272095][ T8837] device hsr_slave_1 entered promiscuous mode [ 166.311801][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.318929][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.327548][ T8841] device bridge_slave_0 entered promiscuous mode 22:49:37 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe) [ 166.364236][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.372188][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:49:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3a001, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000000000008001500"/32, @ANYRES32=0x0], 0x24}}, 0x0) r2 = accept4(r0, &(0x7f0000002d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002d80)=0x80, 0x80800) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000002dc0)=0x8, &(0x7f0000002e00)=0x4) [ 166.417671][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.434730][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.443100][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.452788][ T8841] device bridge_slave_1 entered promiscuous mode [ 166.539503][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.557162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.566368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.582376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state 22:49:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000480)=[@timestamp, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x4}], 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x10076) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0x3, 0x4, 0x100, 0x80000000000000}, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0xad96, 0x200ff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000200)={0x0, 'nlmon0\x00'}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x7}) accept$ax25(r2, &(0x7f0000000140)={{}, [@default, @default, @bcast, @rose, @null, @default, @null, @bcast]}, &(0x7f00000001c0)=0x48) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000003c0)={0x1, &(0x7f00000002c0)=[{}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x100000, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @broadcast}, &(0x7f0000000500)=0xc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r5, r4, 0x0, 0x15) getpeername(r1, &(0x7f0000000540)=@pppol2tpv3, &(0x7f0000000240)=0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000400)={'icmp\x00'}, &(0x7f0000000440)=0x1e) [ 166.589445][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.603769][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.621365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.631511][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.638677][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.652066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.696446][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 166.718101][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.735473][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.744570][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.758599][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.767232][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.781314][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.790580][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.803534][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.818584][ T8841] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 166.837568][ T8841] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 166.849636][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 166.849650][ T27] audit: type=1804 audit(1559602178.444:31): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir586418022/syzkaller.Bm54R6/5/memory.events" dev="sda1" ino=16524 res=1 [ 166.898913][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.910360][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.918253][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.926584][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.934962][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.942706][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.951785][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.983147][ T8841] team0: Port device team_slave_0 added [ 167.014710][ T27] audit: type=1800 audit(1559602178.614:32): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name=68756765746C04 dev="sda1" ino=16522 res=0 [ 167.015026][ T8841] team0: Port device team_slave_1 added 22:49:38 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400006a7823a2000000000aaaaaa9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000939f96c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e86aa5648900a6690000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b95aaf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) [ 167.081931][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.091128][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.110711][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.117833][ T8835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.132203][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.155318][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.170900][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state 22:49:38 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4021, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x5, 0x8001, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8dc964df4e779ca3}, 0x40094) [ 167.178033][ T8835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.192889][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.212823][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.254905][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.282095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.353943][ T8841] device hsr_slave_0 entered promiscuous mode [ 167.383035][ T8841] device hsr_slave_1 entered promiscuous mode [ 167.432040][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.439135][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.447149][ T8845] device bridge_slave_0 entered promiscuous mode [ 167.455004][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.462698][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.470319][ T8845] device bridge_slave_1 entered promiscuous mode [ 167.500136][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.509696][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.518510][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.527513][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.536306][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.545474][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.562840][ T8845] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.578105][ T8833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.592369][ T8833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.608251][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.616071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.624763][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.633515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.642863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.651053][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.659443][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.678545][ T8845] bond0: Enslaving bond_slave_1 as an active interface with an up link 22:49:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read(r1, &(0x7f0000000240)=""/127, 0x2001002f) getsockopt$inet6_dccp_int(r3, 0x21, 0xe, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000007a9a2da7cc6ca15d5ede706b8413a59c4f41ebc131096fde05a056eee1b520237726918816a78531889e7455cb20fe9a39f1561fcb760ff2c6097af04c920b480a981b7b96cb3abd97826d7178d23d8b76a97925"], 0xffffff9c) [ 167.699282][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.764166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.773221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.781486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.788584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.797073][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.827057][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.835928][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.844985][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.852116][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.873079][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.881723][ T8845] team0: Port device team_slave_0 added [ 167.908365][ T8845] team0: Port device team_slave_1 added [ 167.924712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.940255][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.015389][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.024794][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.033624][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.045835][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.059025][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.068521][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.077350][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.086147][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.096243][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.107801][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.164817][ T8845] device hsr_slave_0 entered promiscuous mode [ 168.222177][ T8845] device hsr_slave_1 entered promiscuous mode 22:49:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x100007ff}, 0x10) write(r0, &(0x7f000018efdc)="1c0000005e001f0014f9f4ff08000000000003400000000000000000", 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) [ 168.333302][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.362054][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.402586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.411463][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.464704][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.483802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.492722][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.500961][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.508065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.516527][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.525959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.534880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.542129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 22:49:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r2 = accept4(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000140)=0x80, 0x80800) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f00000001c0)=0x1000, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008091, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 168.563773][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.572193][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.642904][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.649845][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.659828][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.669770][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.678689][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.687549][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.705044][ T8841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.715741][ T8841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.736349][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.750825][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.759956][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.778384][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.790127][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.800592][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.817796][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.829156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.837071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.858224][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.867290][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.875803][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.882895][ T8842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.891420][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.900403][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.908797][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.915886][ T8842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.938330][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.949150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.969331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.979193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.007500][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.016936][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.032401][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.042529][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.050911][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.060019][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.069267][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.081827][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.090159][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.108973][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.148522][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv0 22:49:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000002c0)={r0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f00000003c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000400)={r3, 0x9}, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f00000004319bd070") r4 = socket(0xa, 0x1, 0x1) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000100), 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="d73d88a59a1b4f021d24f24a8a91199f", 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) 22:49:40 executing program 5: unshare(0x8000600) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000080)={'veth0_to_bond\x00', @ifru_data=&(0x7f0000000040)="2bbc6c75e8f42d054d0fdfa53ad2d40e706b77e3acc06b386a520392bec33698"}) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 22:49:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x0, &(0x7f0000001540)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x16, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 22:49:40 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x800000000000000, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000140), 0x20}, 0x20) 22:49:40 executing program 0: getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0xff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x80000001, 0x81}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r1, 0x4}, &(0x7f00000003c0)=0x8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000004c0)=0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={r1, 0x8f4}, &(0x7f0000000480)=0x8) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x20010) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000340)=0x78) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000800)=""/224, 0xe0}, 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000940)=0x6, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000005c0)={0x0, 0x386f3c89104deca3, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[]}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 22:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x3c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(r2, &(0x7f0000000280)='1', 0x1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0xed5e0000}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000663000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0) connect(r3, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @local, 0xffffffff}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000002c0), 0x4) read(r1, &(0x7f0000000100)=""/95, 0x5f) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) socket$netlink(0x10, 0x3, 0x52fc748ab6fab946) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) [ 169.501696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 169.509065][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:49:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e24, @empty}}) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='memory.high\x00', 0x2, 0x0) poll(&(0x7f0000000080)=[{r2, 0x502}, {r1}, {r0}], 0x3, 0x0) [ 169.551640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 169.557485][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:49:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000, &(0x7f0000000280)="c58a409727baa28ea52424908a280af0a8442f812c27b830cb834d69d073b17abb02ef3c8136b8d2027ca4546a041e8c59dedf6763ffe49beaa3f8ff7f00000b488951e10c09acdb76fbb4ebe3c2c11e48e807f8aca20e52ad7d9ab11f2ff49cd63c39582c20dd7922ada04b6c5407f20a9b0fe8a1edc3bc83811162bcc42574c45d164e006bdc4386b9afdad0b0621844107955148c825a74e096ea99b8030048a8f57d19893bcd6227c6a9a306930c0ac5aa7aa7a4bb") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f00000000c0)="696270db4d2655518fb53e4eadc5bfc7f456b590b0b17fafa336b24220df2e459d0177dc1f42a8530946a1b6a83715033bd65c7a97d912edb4693717ca9e98fe4bbd807bce2808354ec808b175b84bf33e2fa0db8d05843f308aec1d947c518e20098f4d6dfe6fea62694429f792e29f3336e3fac4ad050240e2a7c574ecb00abd1631261b5182e0aecf03f5106b7d50ae509c9895e05e94201ead6c54be0e398afccbce426f2705b0792a621a96d2cf4a6219517d62cc3d8a1b6b2180ad6295809c1374eec7d0702747ef7bba757e6eb89fbb3bc16082d34340a3d8656dacbbd495f0608349bec693dfb383e2a4bbab6580b9", 0xf3) r1 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 22:49:41 executing program 5: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804806", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a000008000000000000000000"], 0x18}}, 0x0) socket$isdn(0x22, 0x3, 0x21) 22:49:41 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x800000000000000, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000140), 0x20}, 0x20) [ 169.788676][ T8988] [ 169.791183][ T8988] ============================= 22:49:41 executing program 3: r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x0) r1 = accept(r0, &(0x7f0000001300)=@isdn, &(0x7f00000013c0)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f00000014c0)=ANY=[@ANYBLOB="26e1bc9deb0d8981835d45f4d7", @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRESOCT, @ANYRES64=r0], 0x58) recvmmsg(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)=""/44, 0x6}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, 0x0, 0xffffff75}}], 0x98, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001400)='team\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000001280)={&(0x7f0000000100), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r6, 0x408, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x41) [ 169.829866][ T8988] WARNING: suspicious RCU usage [ 169.848614][ T8975] IPVS: ftp: loaded support on port[0] = 21 22:49:41 executing program 0: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x4000000000003, 0x39) ioctl$void(r1, 0x5451) recvfrom$inet6(r1, &(0x7f00000000c0)=""/171, 0xab, 0x40, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @loopback, 0x2}, 0x1c) setsockopt(r1, 0x3a, 0x0, &(0x7f0000000000), 0x0) [ 169.873351][ T8988] 5.2.0-rc2+ #13 Not tainted [ 169.909045][ T8988] ----------------------------- [ 169.938725][ T8988] net/ipv4/devinet.c:1766 suspicious rcu_dereference_check() usage! [ 169.972282][ T8988] [ 169.972282][ T8988] other info that might help us debug this: [ 169.972282][ T8988] [ 170.011189][ T8988] [ 170.011189][ T8988] rcu_scheduler_active = 2, debug_locks = 1 [ 170.061325][ T8988] 1 lock held by syz-executor.5/8988: [ 170.070839][ T8988] #0: 000000002a8cb95d (rtnl_mutex){+.+.}, at: netlink_dump+0xe7/0xfb0 [ 170.106668][ T8988] [ 170.106668][ T8988] stack backtrace: [ 170.114989][ T8988] CPU: 0 PID: 8988 Comm: syz-executor.5 Not tainted 5.2.0-rc2+ #13 [ 170.122899][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.132952][ T8988] Call Trace: [ 170.136282][ T8988] dump_stack+0x172/0x1f0 [ 170.140658][ T8988] lockdep_rcu_suspicious+0x153/0x15d [ 170.146067][ T8988] in_dev_dump_addr+0x36f/0x3d0 [ 170.150937][ T8988] inet_dump_ifaddr+0xa8f/0xca0 [ 170.155806][ T8988] ? inet_select_addr+0x8d0/0x8d0 [ 170.160852][ T8988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.167125][ T8988] ? inet_select_addr+0x8d0/0x8d0 [ 170.172174][ T8988] rtnl_dump_all+0x295/0x490 [ 170.176787][ T8988] netlink_dump+0x558/0xfb0 [ 170.181300][ T8988] ? netlink_broadcast+0x50/0x50 [ 170.186244][ T8988] ? lock_downgrade+0x880/0x880 [ 170.191118][ T8988] __netlink_dump_start+0x5b1/0x7d0 [ 170.196342][ T8988] rtnetlink_rcv_msg+0x73d/0xb00 [ 170.201306][ T8988] ? rtnl_bridge_dellink+0x6c0/0x6c0 [ 170.206602][ T8988] ? rtnetlink_put_metrics+0x560/0x560 [ 170.212065][ T8988] ? rtnl_bridge_dellink+0x6c0/0x6c0 [ 170.217361][ T8988] ? netlink_deliver_tap+0x22d/0xbf0 [ 170.222652][ T8988] ? find_held_lock+0x35/0x130 [ 170.227430][ T8988] netlink_rcv_skb+0x177/0x450 [ 170.232206][ T8988] ? rtnetlink_put_metrics+0x560/0x560 [ 170.237673][ T8988] ? netlink_ack+0xb50/0xb50 [ 170.242305][ T8988] ? kasan_check_read+0x11/0x20 [ 170.247173][ T8988] ? netlink_deliver_tap+0x254/0xbf0 [ 170.252470][ T8988] rtnetlink_rcv+0x1d/0x30 [ 170.256895][ T8988] netlink_unicast+0x531/0x710 [ 170.261677][ T8988] ? netlink_attachskb+0x770/0x770 [ 170.266827][ T8988] ? _copy_from_iter_full+0x25d/0x8c0 [ 170.272213][ T8988] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 170.277956][ T8988] ? __check_object_size+0x3d/0x42f [ 170.283157][ T8988] netlink_sendmsg+0x8ae/0xd70 [ 170.287910][ T8988] ? netlink_unicast+0x710/0x710 [ 170.292860][ T8988] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 170.298404][ T8988] ? apparmor_socket_sendmsg+0x2a/0x30 [ 170.303869][ T8988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.310092][ T8988] ? security_socket_sendmsg+0x8d/0xc0 [ 170.315534][ T8988] ? netlink_unicast+0x710/0x710 [ 170.320476][ T8988] sock_sendmsg+0xd7/0x130 [ 170.324879][ T8988] ___sys_sendmsg+0x803/0x920 [ 170.329539][ T8988] ? copy_msghdr_from_user+0x430/0x430 [ 170.334985][ T8988] ? kasan_check_read+0x11/0x20 [ 170.339838][ T8988] ? __fget+0x381/0x550 [ 170.343992][ T8988] ? ksys_dup3+0x3e0/0x3e0 [ 170.348401][ T8988] ? lock_downgrade+0x880/0x880 [ 170.353251][ T8988] ? __fget_light+0x1a9/0x230 [ 170.357907][ T8988] ? __fdget+0x1b/0x20 [ 170.361982][ T8988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.368222][ T8988] __sys_sendmsg+0x105/0x1d0 [ 170.372820][ T8988] ? __ia32_sys_shutdown+0x80/0x80 [ 170.377970][ T8988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 170.383430][ T8988] ? do_syscall_64+0x26/0x680 [ 170.388102][ T8988] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.394148][ T8988] ? do_syscall_64+0x26/0x680 [ 170.398831][ T8988] __x64_sys_sendmsg+0x78/0xb0 [ 170.403584][ T8988] do_syscall_64+0xfd/0x680 [ 170.408073][ T8988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.413943][ T8988] RIP: 0033:0x459279 [ 170.417825][ T8988] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.437406][ T8988] RSP: 002b:00007ff8f9ff0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.445813][ T8988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 170.453762][ T8988] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 170.461712][ T8988] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 170.469662][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8f9ff16d4 [ 170.477614][ T8988] R13: 00000000004c6cdf R14: 00000000004dbb08 R15: 00000000ffffffff [ 170.488888][ T8988] [ 170.491226][ T8988] ============================= [ 170.496125][ T8988] WARNING: suspicious RCU usage [ 170.500980][ T8988] 5.2.0-rc2+ #13 Not tainted [ 170.505605][ T8988] ----------------------------- [ 170.510448][ T8988] net/ipv4/devinet.c:1766 suspicious rcu_dereference_check() usage! [ 170.518657][ T8988] [ 170.518657][ T8988] other info that might help us debug this: [ 170.518657][ T8988] [ 170.528449][ T9015] IPVS: ftp: loaded support on port[0] = 21 [ 170.529140][ T8988] [ 170.529140][ T8988] rcu_scheduler_active = 2, debug_locks = 1 [ 170.543547][ T8988] 1 lock held by syz-executor.5/8988: [ 170.548920][ T8988] #0: 000000002a8cb95d (rtnl_mutex){+.+.}, at: netlink_dump+0xe7/0xfb0 [ 170.557354][ T8988] [ 170.557354][ T8988] stack backtrace: [ 170.563320][ T8988] CPU: 0 PID: 8988 Comm: syz-executor.5 Not tainted 5.2.0-rc2+ #13 [ 170.571211][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.581259][ T8988] Call Trace: [ 170.584535][ T8988] dump_stack+0x172/0x1f0 [ 170.588855][ T8988] lockdep_rcu_suspicious+0x153/0x15d [ 170.594215][ T8988] in_dev_dump_addr+0x2d6/0x3d0 [ 170.599053][ T8988] inet_dump_ifaddr+0xa8f/0xca0 [ 170.603908][ T8988] ? inet_select_addr+0x8d0/0x8d0 [ 170.608937][ T8988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.615190][ T8988] ? inet_select_addr+0x8d0/0x8d0 [ 170.620202][ T8988] rtnl_dump_all+0x295/0x490 [ 170.624782][ T8988] netlink_dump+0x558/0xfb0 [ 170.629269][ T8988] ? netlink_broadcast+0x50/0x50 [ 170.634193][ T8988] ? lock_downgrade+0x880/0x880 [ 170.639036][ T8988] __netlink_dump_start+0x5b1/0x7d0 [ 170.644219][ T8988] rtnetlink_rcv_msg+0x73d/0xb00 [ 170.649150][ T8988] ? rtnl_bridge_dellink+0x6c0/0x6c0 [ 170.654418][ T8988] ? rtnetlink_put_metrics+0x560/0x560 [ 170.659860][ T8988] ? rtnl_bridge_dellink+0x6c0/0x6c0 [ 170.665129][ T8988] ? netlink_deliver_tap+0x22d/0xbf0 [ 170.670402][ T8988] ? find_held_lock+0x35/0x130 [ 170.675173][ T8988] netlink_rcv_skb+0x177/0x450 [ 170.679921][ T8988] ? rtnetlink_put_metrics+0x560/0x560 [ 170.685362][ T8988] ? netlink_ack+0xb50/0xb50 [ 170.689953][ T8988] ? kasan_check_read+0x11/0x20 [ 170.694790][ T8988] ? netlink_deliver_tap+0x254/0xbf0 [ 170.700067][ T8988] rtnetlink_rcv+0x1d/0x30 [ 170.704465][ T8988] netlink_unicast+0x531/0x710 [ 170.709214][ T8988] ? netlink_attachskb+0x770/0x770 [ 170.714307][ T8988] ? _copy_from_iter_full+0x25d/0x8c0 [ 170.719674][ T8988] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 170.725386][ T8988] ? __check_object_size+0x3d/0x42f [ 170.730569][ T8988] netlink_sendmsg+0x8ae/0xd70 [ 170.735330][ T8988] ? netlink_unicast+0x710/0x710 [ 170.740265][ T8988] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 170.745800][ T8988] ? apparmor_socket_sendmsg+0x2a/0x30 [ 170.751240][ T8988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.757469][ T8988] ? security_socket_sendmsg+0x8d/0xc0 [ 170.762933][ T8988] ? netlink_unicast+0x710/0x710 [ 170.767874][ T8988] sock_sendmsg+0xd7/0x130 [ 170.772275][ T8988] ___sys_sendmsg+0x803/0x920 [ 170.776938][ T8988] ? copy_msghdr_from_user+0x430/0x430 [ 170.782383][ T8988] ? kasan_check_read+0x11/0x20 [ 170.787214][ T8988] ? __fget+0x381/0x550 [ 170.791352][ T8988] ? ksys_dup3+0x3e0/0x3e0 [ 170.795756][ T8988] ? lock_downgrade+0x880/0x880 [ 170.800587][ T8988] ? __fget_light+0x1a9/0x230 [ 170.805247][ T8988] ? __fdget+0x1b/0x20 [ 170.809315][ T8988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.815554][ T8988] __sys_sendmsg+0x105/0x1d0 [ 170.820157][ T8988] ? __ia32_sys_shutdown+0x80/0x80 [ 170.825268][ T8988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 170.830709][ T8988] ? do_syscall_64+0x26/0x680 [ 170.835368][ T8988] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.841421][ T8988] ? do_syscall_64+0x26/0x680 [ 170.846098][ T8988] __x64_sys_sendmsg+0x78/0xb0 [ 170.850844][ T8988] do_syscall_64+0xfd/0x680 [ 170.855330][ T8988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.861203][ T8988] RIP: 0033:0x459279 [ 170.865089][ T8988] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.884686][ T8988] RSP: 002b:00007ff8f9ff0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.893083][ T8988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 170.901050][ T8988] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 22:49:42 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20100000410001020000000000000000000000008c0082000200000000000000"], 0x20}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000280)=0xfffffffffffffffb, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xea4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x195d522348252b53) 22:49:42 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) pipe(&(0x7f00000001c0)) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f00000000c0)=""/18, &(0x7f0000000100)=0x12) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x3a, @rand_addr=0xb7, 0x4e22, 0x2, 'lblc\x00', 0x2, 0x1, 0x7f}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r0}) 22:49:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)) [ 170.909002][ T8988] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 170.916958][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8f9ff16d4 [ 170.924908][ T8988] R13: 00000000004c6cdf R14: 00000000004dbb08 R15: 00000000ffffffff 22:49:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default, @null]}, 0x40) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/227, 0xe3}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='ipddp0\x00', 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) r5 = openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='\x00', r6}, 0x10) writev(r5, &(0x7f00000000c0), 0x20000000000002dd) sendmsg$rds(r1, &(0x7f0000002fc0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000240)=""/74, 0x4a}], 0x3, &(0x7f0000005180)}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000140)={'bcsh0\x00'}) 22:49:42 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000240), &(0x7f0000000280)=0xe, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x2, {0x3, 0x0, 0x1f, 0x1f, 0x0, 0x80}, 0x3, 0xffffffffa7148347}, 0xe) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='bcsf0\x00\x00\x00\x00\x00\x00i\x11\x00') r3 = socket$inet(0x2, 0x5, 0x6d) getsockopt(r3, 0xffffffffffff7fff, 0x2000000000000003, &(0x7f0000002080)=""/4096, &(0x7f00000002c0)=0x1000) [ 171.021085][ T9029] IPVS: set_ctl: invalid protocol: 58 0.0.0.183:20002 22:49:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000100000037000000"], 0x14}}], 0x1, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x331, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffffffffff7, 0xfffffffffffffd37) r3 = accept(r0, &(0x7f0000000040)=@caif=@util, &(0x7f00000000c0)=0x80) sendto$llc(r3, &(0x7f0000000100)="642f7ab6add6d9fbb21e38c4a12e5066ac2538e4efc6e00c7eaa56f48fb4696e2d1fd3b445fd3b8b6464e75b3392c2a60fb3816b8f598fd198ac3c29e1ebc0094fa51140b7e0c639d440a25b132d799ae746188a9e664627a5a26b690ac0ab81b7fd11c2b7074b5a2b3e7ff7358996841f7e7f3df2ce956981071de0fa98207ba54feb2b4a9438d3f2cbe50be46bba57564b9f74bcae9967ef82a5ed52715f6d002e84a544ef1e685f281b2c78bba5fbc15db72b403a36735f9de201", 0xbc, 0x20040800, &(0x7f00000001c0)={0x1a, 0x0, 0x8000, 0x1f, 0xffffffff, 0xff, @random="edc01bfabea1"}, 0x10) 22:49:42 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="0300000000c2ad8c0d386b5086dd70e25dc503f8a22493cde83c4cefd9e101cb2a4784b3457607f94853c8ff6ff680a1285fd7d60000", 0x36}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @broadcast}, 0x10) getpeername(r0, &(0x7f0000001c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000001d00)=0x80) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000001d40)={r0, 0x4}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4, 0x4) [ 171.115795][ T9029] IPVS: set_ctl: invalid protocol: 58 0.0.0.183:20002 22:49:44 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect(r0, &(0x7f0000000280)=@x25={0x9, @remote}, 0x80) socketpair(0x9, 0xf, 0x9, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) r2 = accept(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 22:49:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x1b0a}, 0x8) write(r1, &(0x7f0000000100), 0x1ede5) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e22, 0x2b0, @ipv4={[], [], @multicast1}, 0x8}}, [0x10001, 0x7fff, 0x81, 0x4, 0x1, 0x9, 0x101, 0x3ff, 0x7, 0x800, 0x4, 0x4, 0xffff, 0x80000001, 0xffffffffd3bde7f8]}, &(0x7f0000000240)=0x100) connect(r0, &(0x7f0000000300)=@l2={0x1f, 0x8000, {0x1ff, 0x8, 0x2, 0x56, 0x81, 0x7}, 0x1, 0x401}, 0x80) 22:49:44 executing program 3: socketpair(0x1, 0xa, 0x7, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'\x00', 0x8}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x4, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2000000009, 0x800000000000003f, 0x4, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000da1000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000068000)}, 0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "f4b9aea8c2f2c0f6", "d1d27132ff66f270ea887e5c9e6e4583", "ff590f15", "deeac404f41276a4"}, 0x28) 22:49:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clock_gettime(0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0xa, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x7d, 0xfff, 0x100000000, 0x7fff, 0xeb2e, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e24, 0x319, @loopback, 0x100}}, 0x100000000, 0xbec1, 0x7ff, 0x1, 0x10}, 0x98) 22:49:44 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000240), &(0x7f0000000280)=0xe, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x2, {0x3, 0x0, 0x1f, 0x1f, 0x0, 0x80}, 0x3, 0xffffffffa7148347}, 0xe) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='bcsf0\x00\x00\x00\x00\x00\x00i\x11\x00') r3 = socket$inet(0x2, 0x5, 0x6d) getsockopt(r3, 0xffffffffffff7fff, 0x2000000000000003, &(0x7f0000002080)=""/4096, &(0x7f00000002c0)=0x1000) 22:49:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x0, 0x0, 0x20000fff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f623448") ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xad, {{0x2, 0x4e21}}}, 0x88) socket$alg(0x26, 0x5, 0x0) socket$caif_stream(0x25, 0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="d1000000990671499acaf04551d92fe700bdfcf7b7c744000007003068da4174fbe113b6daa9c36f68fec3cfaa44666cde0a4385cdae72a4f80b8c49aad82526d62df448a542e71c000084cf2321b2d315d28101705f4c20cb00002052c722c35409462e5e4d55ab9e10"], 0x6a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0xfffffe8f) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) 22:49:44 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x4557434d) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl(r1, 0x3, &(0x7f0000000100)="7ef2bb8785f7f5dcc1dd5f8abc3728aab4144d3ebbaf75ede2b15ec37280266fa0ed6ec769108aa7fe55ef6a00b71e5d8acc334e4ef261d2babb1b8f01641b5e10968d692a0ac2fef2666fc0e07dd33320") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000080)) 22:49:44 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0x6, "24d67898f73076a1020082455ba8268b22b3e110c205cae77233a185aa559f56942c9415b37329089ffe7486d2193dbc4e97b6b7024807066d69ba88075c950f9fd95ecf5572fc67fab805638e9505fc1e36a73c2345c4632564765ef042f15a2bfccf40ae4575d312840088bd7c1b7add9eaed5f75ee45b0d88568627f0253d"}) bind(r1, 0x0, 0x0) 22:49:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x8a, 0x4) bind$bt_hci(r0, &(0x7f0000000040), 0xc) 22:49:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "8a5259c04247d69d", "6489174bbced883196432fbcea91bcbc", "df67c0a2", "40279aca5225bf19"}, 0x28) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x530, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x20, @loopback, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @loopback, 0x3000000000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6dca}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc7c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb721}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff00000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7515}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x499}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0xff}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa7}]}]}, 0x530}, 0x1, 0x0, 0x0, 0x40000}, 0x44) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080)=0x20, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfffffcbe) read(r4, &(0x7f0000000000)=""/81, 0xffffffd5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40000000000a132, 0xffffffffffffffff, 0x0) 22:49:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) getsockopt(r1, 0x0, 0xd0, &(0x7f0000001400)=""/203, &(0x7f0000000040)=0xcb) 22:49:45 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000040)={0x6, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x108) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x54, "37a7e5127fb01ea3ade60e3605a09e07744ac19e84260f41d2744d8f0c7fa8c4eb0988355fa730646131cac702f45bdc14a37c2052621c0f7a085c0a8842ab3eb2e38b2e2f44de7677aa44e07ab2af2b8e375805"}, &(0x7f0000000340)=0x78) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280)=0x101) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) r2 = accept(r1, &(0x7f00000001c0)=@hci, &(0x7f0000000240)=0x80) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) [ 173.449116][ T27] audit: type=1804 audit(1559602185.044:33): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir516035900/syzkaller.BGTKlM/4/memory.events" dev="sda1" ino=16572 res=1 22:49:45 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000340)={0x20}) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) pwrite64(r0, &(0x7f00000003c0)=' ', 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e21, @multicast2}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000180)) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8a\xc98\x94@\xb6Gp\xd3r\xd3\xff\xad\xb7\x1dI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\x00\x00\x01\x00R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5\xa6\xda\xd3\x8c\xfaA\xeb\xed\x18\xf5\xa4C\xd90/C&\x7f\x1a\x94\x97\xab\xcc\xa7\x8d\xc0\xa8O\x9eg\xdd\xec\xff\x04\x02\xd8V\xd7O\xcb\xe4P\xc6b\xf3j\x05\x13]\x91\x83z\xfa\xc4\xc1\x84>,k\xfbz\x7f\xe6\x03q\x94\x9a\xb7\xd7Q\xe3\x82\xcf\xd0IB\x93l\x19\xe7\x8bi\xcek\xc4\xda/\xe2\x8b\x00\x81\x00+zp\xf7\xc0`\xb0\xe6\rl`\f\x06`~v\x16\xe7\xc5\x82\xf3\xff\xe6\xc6\xab\x99C\xd5Q\x912\xb5\x05&\x04\x13\xfa\xb0\xa3\xcc\xb0e\xfa\x90^\xa0\xd0\xa0YB\xf0\xc1M\x9c#\x99)\x9a\x1b\xdc\xa8w}HD\xfeZ6\xe8rc~u\xef\xfd\x8aM\x11F\xbap\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) pipe(&(0x7f0000000400)) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x0, 0x8, 0xe0ffffff, 0x300000000000000}) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) [ 173.547183][ T27] audit: type=1800 audit(1559602185.044:34): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16572 res=0 22:49:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0xa, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80000000, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x2, @loopback, 0x6}, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100000000}, 0x4, [0x41dc, 0x9, 0x101, 0x80000000, 0x0, 0x8000, 0x2a, 0x9]}, 0x5c) listen(r1, 0x85db) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 22:49:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000200)={0x10001}) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x7fffefb4, &(0x7f0000000180)={&(0x7f00000002c0)=@report={0x4c, 0x20, 0x0, 0x0, 0x0, {0x0, {@in6=@mcast2, @in=@multicast2}}}, 0x4c}, 0x8}, 0x0) 22:49:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5, 0x1, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) r1 = accept4$bt_l2cap(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x800) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x176) r2 = socket(0x8, 0x6, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000020000000a00000008000005010400000a00000003000000340000000c00000005000000010000000a0000000102b2bbf09a4ec3049756000000030000000e00000005000000400000000200000001000000030000000d00000001000000140000000200000003000000010001000900000003000000090000000e00000003000006040000000d000000030000000c00000005000000"], &(0x7f0000000500)=""/193, 0xaa, 0xc1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1d, 0xfffffffffffffffc, 0x9, 0x0, 0x100, r0, 0x4, [], r3, r4, 0x5, 0x1}, 0x3c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="97", &(0x7f0000000400)}, 0x20) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000680)={@multicast2, @broadcast}, &(0x7f00000006c0)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10) [ 173.690115][ T27] audit: type=1804 audit(1559602185.044:35): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir516035900/syzkaller.BGTKlM/4/memory.events" dev="sda1" ino=16572 res=1 [ 173.785629][ T27] audit: type=1800 audit(1559602185.234:36): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16572 res=0 22:49:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x806, 0x5) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r2, &(0x7f0000000340)="e8bb35fcf62bc794e3fe963df4f95fef5b202bea282ac7a6342f6cd86cac5c70a8ff5cb14ab03da66356de416fb32735051af9dccb9a59513baa8c93c8f7bb2c4eb417a7bb40a86046ac9d12b2032789620d2a5279f023f9017dd66a5a8ac2cb0dc4f7d9a70a11accfdf3f039a14b0d4d99d36e2b84d60b2960cbce5304122065d217072ef27058e17737e7fed7c81b76c69354395fcc78c47c38aac5d4069f9213464c15c0cf3cc861496f99923374639b6cd", &(0x7f0000000400)="90dc6817a9d0c3fd2a72892f62e977d06a4fa9eb1ffff07f7eac98df5938ffa77f0c3b91c6e7cb96e447b0cb1aa013789548011c8f48fe1e7a7e519c109c7fa17eb86677ad53a68ad79a8b33174b01c31e1fa61116ee8d06ff688bbed9ee40338953f309c485b6a61efe1767cbc5ac74ec81bbf8edccf3bf692a", 0x2}, 0x20) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @local}, {0x307, @broadcast}, 0x2, {0x2, 0x4e22, @loopback}, 'bcsf0\x00'}) syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x8, {0x2, 0x0, @remote}, 'veth0\x00'}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24}, {0x2, 0x4e21, @loopback}, 0x90, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000100)='bond_slave_1\x00', 0x8, 0x1, 0x3c}) socket$pppoe(0x18, 0x1, 0x0) 22:49:45 executing program 4: socket(0x2, 0x804, 0x2) syz_emit_ethernet(0x1015, &(0x7f00000011c0)={@broadcast=[0xff, 0xe0], @local, [{[], {0x8100, 0x5, 0x6, 0x2}}], {@x25={0x805, {0x2, 0x36, 0xff, "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"}}}}, 0x0) 22:49:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000000)="0adc1f123c123f319bd070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) 22:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="37009fa010460dfa2c52b7d1d901472a858d6ed01cd026614748a2c02011556c01d61350343072f83812890759049783494bbc1dc3bdd3704e0014dbee21e8b0ee8e27a90214aa6411c3c24204fbbef2a63c6040f1cce85dcd25c3789122a435ab7909f2f6b7cb450d428415e7bc052ba3ce667ae366085fb6f16c8b0416063cb212398ad1292167c0ae93951f95414d0c9c181810405ab1a895713261a053e6b4eb174c704f04a9eb9fe5c31aab1eceee54fa8d", 0xb4) listen(r1, 0xfffffffffffffffe) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/139, 0x8b, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x26f) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0xffffffffffffffc2) shutdown(r2, 0x1) 22:49:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r4 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002740)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002840)=0xe8) r6 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002880)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000002980)=0xe8) r8 = accept(r0, &(0x7f0000003580)=@nl, &(0x7f0000003600)=0x80) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000003640)={r0, 0x6, 0xbb, "c8fb4eced05178b923d7811e5e5b7740276e3e021cf9c11c6dc4b85bad23db348f094c201f9be890351b9196860f2d21141d25790602340bf209b1789ef3d9296e48f62532e4367a471dcdd34e06217cde253ed4e1b43700e6771e6746bca9ef723eeac36fd29a6ed2533b3fabc0d69b0e0693d472f4e5dba5852c5eecde4ccc2c0406947dfd0fb6094f66f7e9a25a88"}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002e80)=0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003240)={0x0}, &(0x7f0000003280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000032c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000033c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003400)={0x0, 0x0, 0x0}, &(0x7f0000003440)=0xc) bind$bt_hci(r0, &(0x7f0000003540)={0x1f, r1, 0x3}, 0xc) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000003700)={0x3, @default, r6}) sendmsg$netlink(r0, &(0x7f0000003500)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000000340)={0x22b4, 0x32, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x10a4, 0x49, [@typed={0xc, 0x1f, @u64=0x4}, @typed={0x4, 0x7d}, @generic="408dd2b1a1dec5c5e730896471f4f0703fa0c182f08a73d3f18bcf2cf730e00a73043c75d4b964fa3600e1bff6105913ba34cb9c483133b83b2b08bb72cd2f05bc916a43a29ff342d3c6f9bc880b10071921e70374d158b28ac9210b946dcbb0dff1d0628d7aa530736f0ad8db4b3ce8c8c6b57607d6080a33a62d75e910e94142817edf6d50b3f885ffc73bb43b9d", @generic="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"]}, @generic="8e39d1d31b315e260ee930fe158265b729c8a8b9423067d0d41332181d1fc74aaa5565732efbab965c1c3039fde6d33b18d3ca66d25c8008d6abe4069fce0c99a87f37e7a4b526ff6cba1dde5d36a52bc6d3f7a1f8a9135b7ef6e9618f0e2efb6ffb43caae4a058fc8db6d515d78da1f4414175b5677559df1379d35db49e6e04a2c53a0f1d1df0ed3766e8e715ccf8da4f75bafdd1ed740dfc03336cd573223ac88026bb5138c9cb234f0", @typed={0x8, 0x60, @u32=0x20}, @typed={0xc, 0x49, @u64=0x5}, @generic="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", @nested={0xbc, 0x4e, [@generic="56406270085e07e1c24d2ed09756e073ba", @typed={0x8, 0x75, @fd=r0}, @typed={0x28, 0x3b, @binary="8c49cf57cb3232e18d8242da3c3a7d1393adc7a0aee7741a6a56ac3769687d085e344b"}, @generic="7122620ff7a1cf5df88bc5e534a7309f16551fa46588b5c810ae062b82aa936bc59892470b51ca93fdf575ad238451e881abb9d67a2324ae1ef5cf8afc5bac0d50312fde818e639eabcf6e933e360ea842f4213043e68cec35f1", @typed={0x14, 0x85, @ipv6=@mcast2}, @typed={0x8, 0x6f, @uid=r2}]}, @nested={0x10, 0x94, [@typed={0x8, 0x28, @pid=r3}, @typed={0x4, 0x11}]}, @typed={0x74, 0x56, @binary="61eb59c73c68dc4ae0b88b7665d083c24c57a488b90ad25c6a8a900aba4c94f5f46eb5b1e52e09dca65cea18d08f63301b0cfe2d3ed09d33e61d7061215f74d61611a01ace40f2a5a3adcd6f9fc70cae9098f77b49135cb8ac070d465fe85d354237e974f0ec3b40e1f7480d49"}]}, 0x22b4}, {&(0x7f0000002600)={0x2c, 0x26, 0x802, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x2e, @fd=r0}, @typed={0x14, 0x25, @ipv6=@local}]}, 0x2c}, {&(0x7f0000002640)={0xac, 0x33, 0x100, 0x70bd27, 0x25dfdbfe, "", [@generic="3392c9054cbdc2c9b5a7c879c3d75e07e3d788900934ecf81ed8709408464d7231bc5e0d6dbecd9717e11837748b4b236aad6a1ba3bec45552a05ba2e0465ac0999200f5b783911c762912594abce32e662612a6a4010d000d97ee3a5c00915bb029ff9bf5ed72ff065fb970d56b3a80a3465925241921763d8960a5bba0826d0dbb15356df2798a9784f722c3075b0ed604fce4103d78fdceee71dd"]}, 0xac}, {&(0x7f0000003740)=ANY=[@ANYBLOB="1c0000001b00020428bd7000ffdb9ad6397e47995106bffedf250c0096002e215d5521000000"], 0x1c}, {&(0x7f00000029c0)={0x444, 0x1d, 0x202, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x14c, 0x2d, [@typed={0x8, 0x34, @pid=r4}, @typed={0x8, 0x2e, @u32=0x5c1}, @generic="4603d23e55f5b425de8e50534bbacd0943bb9f1ac89dd75584bce4e9751444bf6a6f6e206d14d5c41c01fc66a02db886b40e015bb88703e9b540cf7433fa15e3032a645f866ec240fd2a1255adc2dd3082dfa0d8cecad838815267d2106286f1d20dbc85f266e0229e9a3dc349c3f8f97051e900703859b6bc885a750efbbf1b46166680d2e5fc5e5b03a9fa768baf289a3a6765d361215cd917f9268119de1467649211c449f41fb9a84b07b1ca4ae30b6a8d23c04f55b39e97024c526380fa4c759d25b5d757b76a508a56e419833bdb649f10b5cdbdf139e7a752e0e20903c33bfa3c310de79f27017ce68dda", @typed={0x8, 0x57, @uid=r5}, @generic="e8da6865af384174a9c91383b72b5d52bb34c37a6f8cb495f2f770e5cefb219f21b5ea3969bca0a69fc969bebf3055d4810077e55f629b5f8b7abe75bb6d51d3"]}, @generic="70b1d1b82b204d6be8e0edc5", @generic="f76becfc3977425325102b276303e193b35316458cf9e017551ecfdfbfec0b53ba0ecc2ed75f6c5d618968761c93ae56a216f7dc820ffcf951f01cfa7deb689970a5a1e576a87a81fd301b9dbea23fb92305157fd2050954279bc592494f4205ce72e931975452", @nested={0xcc, 0x21, [@generic="a9a7ca57aa798211174607f15a09f7546b4ae9d28fd95d00d93d6f68962fa6fd69a91f8a0d52d3595ad37d4983619592b0e40ced8b2be4bbc5410ef7150ce159c3258ed10c5e0f509153bb13fa31f72c48831243d1d12de7131df2d5e2edccabc3381f54a5aed94c0bc2a0aacfef564dda7ef23f49d8a03018004ad4769669cbbab066f28c560c4611401989494bc5a785de09ae9dbf349abacfe7b10711338ad38efcff370f86406c226d5002d3c02b1b5016e213bcbefc9846a1195516c65332c015ad2c"]}, @nested={0x1c, 0x95, [@typed={0x10, 0x75, @str='\':-loppp0)\x00'}, @typed={0x8, 0x22, @uid=r6}]}, @nested={0x14, 0x54, [@generic="96c10702ce01a5f00ec13fe14259c0"]}, @generic="c72400cbb65b76dfeda5d4fba7f3f0f28862c8d615039ea33ddee7d6a622e5e76482a3efd87d473bc08d83953ac1b8b07a90de5b624329d4cd2e1fb30be6c4e93abcf9eb23b210f117e12dcf1e1ed992636020d18b3bb3ffe1f081e2b18f4990345d92cc32342ec1ed3bb63b304e2c1747c5c9458eee", @generic="1a82eff983071b2ea71d3255ea91ed7603aa2b779de71fc6856ce4060aa8e08dd7588a6b8f61d2ba197fa0d2ec14d0194619ffb57862b2be3ad422e7420e351176a3496cd35591be107710ec946483ce1565b42645ade301024fde14f7a4810543289f8dee8376400bf8c260caa57595957aa1bbfdb981f7ab72635b9aff09b8933a1f367092a5be0053bf1d9f6dfa2ad951e7faa55201f0492231e65419191fa6c9d91026c5f5fcdd89639ba74cede543ad5ac0d8b9393afc31786a229f9a2e98a1c045ff6a607ad13a58de745a6fdcbf8928ab60510fd30c4cd348248b4e607f775d761c8883b2ed6d73a5e595877d2a73e27743402e9c21", @typed={0x8, 0x7e, @uid=r7}]}, 0x444}, {&(0x7f0000002e40)={0x10, 0x25, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f0000002ec0)={0x2e4, 0x3a, 0x4, 0x70bd2d, 0x25dfdbff, "", [@nested={0xb0, 0x2, [@typed={0xc, 0x6b, @u64=0x6}, @typed={0x8, 0x46, @pid=r9}, @generic="a5d74820bd26fea0914e3cbc9c0e55b2e50cfa5dfd781b6873139a5c6663012bbe32f2726477ca8e6b1d72d18c85ba98a06e734824328fad79317c3ce263074a14ee565be12cdb3236d635d0dcc1716349d2df49ec359a501e18490404d61934d3d8032ebf0478f3347a1f51660f11e57ac482774388d36565011a045c2ba4b04011c13bf929bafd53798b84d43a8be38574346b7eb3"]}, @nested={0x1fc, 0x62, [@typed={0x8, 0x6, @u32=0x5}, @generic="8060ecb6567252f75b011a58d72b499d3d57c7968d6fc5f150d129edfd96987ad8e2f65519ebb44d69d18ab971162f87dbb8a00321d574c53614ab9414cfd1dec24ce440690d34f19e47e1b18bc18bc4ee0cc2f2a1942d7c312fafa009cac1eeb46bc7bf8a2ff3377444dabb0f112ecd662af5f88fc1804630cd273adf0a4a64037b9d46ea17e57d0db70bab605503c5c59163cf3eed99c825281aed7af6645bb3bd7849f15aebe56f6d550da562818072b708f07fb6e65f73a20613ef5706c7625705bf57", @generic="1fbd0e8b45165b0bee6fdd5f2ac4306e1613bfc1f2bd9665a1e2b87ce4da9358529f14bf", @typed={0x4, 0x76}, @typed={0x18, 0x2e, @binary="94fba6c12cbe8e94096a91213f5568b2eed3"}, @generic="f9cf21cfe3929b1759e5bf2615788487df95d6a09445770ee93f93aa0b4b3499fbf65b7e8570df3da05ef954a700411f8553111caca3b876ef10f9ed66a3927f77b529458fc36af4a151bf516404f5a5a9496aeedf18213cdddb9f7b95f6edde7e43d23433e9cf6845c93b1461397fdef5eac64d440eebf84629653dda029b4eded4d453b36b646a298fe7e546e42ca0d9b07810b982fbaa70fb008a05990717598c76bda912a9b4b834657eb165eef7d14ed2863d627a5358328694497824cf12678f3d2fe018cbd0f4ac5de326835d53dee74790fca456c5e17a8f38135d10b6c58e29d4e49b4c6197fe"]}, @generic="3fde603eae24118e705705efb6ea972965c6a4b2c30f28bbf730513be276714ad524be5f3423e9"]}, 0x2e4}], 0x7, &(0x7f0000003480)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x50, 0x10}, 0x800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000002700)=@sack_info={0x0, 0x800, 0x5}, &(0x7f0000003780)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000037c0)={r14}, &(0x7f0000003800)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xc, 0x6d, 0x7ff, 0x0, 0x0, 0x0, [], r15}, 0x3c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x80000001, 0x2, 0xef67}) 22:49:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r2, 0x7c}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'hsr0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_coalesce={0x49}}) 22:49:46 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000340)=0x80, 0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e22, 0x400, @local, 0x3}, {0xa, 0x4e24, 0xfffffffffffffff9, @remote, 0x9}, 0x8, [0x6, 0x8001, 0xd9, 0xffffffff, 0x1, 0x3ff, 0x6, 0x5]}, 0x5c) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000400)=""/10, 0x238000, 0x800, 0xffff}, 0xffc0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="4ab9ff6f") r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x8, 0x6}, 0x8) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000140), 0x4) listen(r3, 0x5) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000240)="974719b9907ee68d920f2a7c106cdd1f4179d446ea216c4bdb400835ffc12368bd2fc65d5b9a64906e554bd9d3ade237afc7d6429ca6c6be07f1f48061116b85770c8ce149abc08d8e630f26ad613f5da7f34640d06f6a9bfa5a", 0x5a) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80000000, 0x4) sendto$inet6(r3, 0x0, 0x363, 0xfffffffffffffffe, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000180)=""/117, &(0x7f0000000200)=0x75) listen(r3, 0x0) 22:49:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @broadcast}, 0x221, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='ip6tnl0\x00', 0x6, 0x6, 0x3}) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000100)="bad1bedece14ce1ecaf707c77c0b1dc2212225f52d859762f47ffe6dc997833f5690ef", 0x23) 22:49:46 executing program 5: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000040)=@caif=@dgm={0x25, 0x7}, 0x80, 0x0, 0x397}, 0x4000810) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000180)=0x81, 0x4) 22:49:46 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="056b3a837b84", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}, 0x0) 22:49:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001e0001000000000000000000000000005745a0a432c660f306c4c7bb8d2c5b9ae4cb42e40cf9cb1856619dc8623b52f004e8c555588eee9a43c58f7a04b63462a66698dc6c9a1c06129f8fd764649b4a29b27b0f6ec85f05dd73de57e8b973244cfc363b2ea6eebee3c2df4360cf59b2b837e057d2d9857af43d78bd9c4db07223dd6062304468f69c"], 0x14}}, 0x0) 22:49:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000900)={0x0, 0xfffffe78, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c4602af01ff010000000100000003003e000500000060010000000000004000000000000000c0000000000000000100000032013800010001000000000001000000de000000ff7f00000000000001000000000000000800000000000000d7300000000000007f0000000000000001000000010000006ba613cc221217f6d05d5e4dcfe17792231c7c4f7efea6879fb90c6114af3f98809eed6c571f661f3215419090ddba5f761dc0e259d924b2a824174618ee11714bdff32ee533b6dff659726a002170cd2afaff8748aa4eb7860ac49e675a4f1b8c6a2dcaf395c40ac54180aae4f6773de05cc1008089e38245f780d26c454012f5bf14d3269bfdb2ebf1830cb048b2a5ba00a0f2c96187a7d2664827219212cb66cf81a72cd172bd1b47a3e90777f01fc0aba16e857ad1b1d2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ab2085f00"/721], 0x2d1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x2, 0x30, 0x80000000, 0x7ff}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r2, 0x5}, 0x8) sendto(r0, &(0x7f0000000540)="8aa2e6f00a2e8a13cb432827f9915694d6bde7fa26edd3c0d3fe16194fa9ccda4f20f020657ee01d4fc354f4deb5ded7e5a106cbf651e7792d9b264e725d1edf014fe8f2e0ac9e853225cacc5a0e3f2060ae3741bb0dd6e8431ca0bda91a6769b504872e3f9c99d315f89746bce78ca2bd96d729770db6d5b583801e86a9194b1d1d2d31d4a5d754b1250f282c7a79ed430db12784d7a31cc80691d5d6955ee7b3e0435941d1f74036fe99c427d44756b7a4099bc3b225294f302a1beeb1a10a2e3a3524eeb2f76df44e29f6562cbed27c376e1942c919172457ef205ada3a0d55edd30281cd535c561a476da061aa84f840a5afec4c82ee46e247a639cc2809edf3f35d772fc98f3664dfce663594dc8a23e239ea409fd88a3be381da9393313ffb34fe8401d22db5262d78a283460326db95e05054ae464d073430ec68de3d4cd62eae9cde5dfef257b6842367b4e2e0038075fb31a2d683c96f0cefa096ea537eb46628394641", 0x168, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f0000000e40)="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", 0x131, 0x40801, 0x0, 0x0) 22:49:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x80000000, 0x6}) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='+1'], 0x2) 22:49:46 executing program 4: socket(0xd, 0x7, 0x100000001) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000007c0)=0x8f, 0xfef7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1}, 0x0) 22:49:46 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88000800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'selinux'}], 0xa, "ed18d348c44368f03a7b526cb4bfec0b8b46bbb774f732a1fa9ab7c9e5db0fb2365780d9757101ce66b406f9aa6e6c9f24458d2f3dcb69d4e542a393699ae0513d3dfa31aba4db2825dc00530103a16b802d8d"}, 0x66) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 22:49:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00\xa5O\xe0\xf8\xc3\x1e\xa1\x99\xe6[G\x05&-q;\x84\xe0M6Y\xf0^^j\x17Q\x1e,\xd53?Q\xbe\xd8@\xee\x83`\f\xee\xb0#\x9d\xd9\x99\xc8\xbf\xf8\xe6\xcd\xff@\x05\x9cf_l\x92\x01V\x916\x04\xd4\x9f\x84#I\xc6\xc3\a\xa1\xad+YX\b\xffy%\x19\xdc0=\x96bE\x97<}\'\xbf\xbb\xf6\xe1\x91\x88n^\xe2\xd41B*\xa2\xda;CQ\x9bP}\rX\x10\xfb\x10{\x16\xb5\xc2\xa4\xbb\x014\xbd\xac;\xc5 \x8e\x9f\xb3RNu\x0fNAI\xa2e6h\xa0\xdeJ\xf8\xbb.\xd4\x85', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x36b) getsockopt$inet_buf(r1, 0x84, 0x7f, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) 22:49:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='lapb0\x00') getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, &(0x7f0000000100), 0xfffffffffffffd80) 22:49:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket(0xf, 0x80005, 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{}, "6528a03e807b1b39", "d97d30fb74a5b304b556d625b1e44c83", "53c3472c", "70bdcf964804ba08"}, 0x28) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000008c0)={0x0, 0x80000001}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000940)={r2, 0x7}, &(0x7f0000000980)=0x8) r3 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x2) 22:49:46 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) poll(&(0x7f0000000000)=[{r1, 0x1}, {r1, 0x422}, {r1}], 0x3, 0x5) poll(&(0x7f0000000100), 0x2000000000000307, 0x0) 22:49:46 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="2465c0e574ab", 'veth0_to_team\x00'}}, 0x1e) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000080)=""/69, &(0x7f0000000100)=0x45) 22:49:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0x800, 0x8001, 0x7fff}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "d9dc7fc0ba0af532", "ce9cca46fdeec3557ddd8e27fdd6b1b699c9a86553f1f7acaf441d27a3e6e2c6", "695de11a", "eecd446eafb86624"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) accept4(r1, &(0x7f0000000100)=@x25, &(0x7f0000000200)=0x80, 0x80800) read(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x306, @broadcast}, 0x4, {0x2, 0x4e21, @multicast2}, 'batadv0\x00'}) getsockname(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 22:49:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, 0x0, 0x37c) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cgroup.con\x9c\xcec\x00&\xaf\x9b6\xbc\x05x\x94<\xfab\x9d=\x13 \x8b\xd7/\xd0\xbe\n\xa1\x16\x83\xd9Yyv_\xcc\xb1q&>\x17\xc6H\xa1\x91\\V\xc61\x94\xdeV}\xf6\nO\x89\xb6_xb\t\t\x997\xe4\x8a\xbd3\xb8\xabFv\xed,&\xbc\x99+\xaa\xce\xc9\xd8V\xdd\x00S%\xde\xe3\x1b\xf5\x89\xe16xm>\xc6\xae\xa3\\e#RB#J\"\\\x96P\x15\xd3\x92\xea@\x1d\x9b,\xb4\xffd\xfcz`\xd5\x81\xcf\x11\x83ro\x01Z\xbac\xe6\xf7\xf6\x1b\x12\x11\x1e\xef\xf4^\xaa\xc1D\xb4\xa5\xc4\xeb\xbd\x1fP\xfe\x00\xd7@@\t\xf2\xe2\xdb\xe3(\x92\xce\x1c=1\v0\xd2\xdfE\xa9\xcdD~X\xe3H\x8c\xaa\x13Fu\'\x12]\x8c\x06TA\x86\xbd\xdf5\xe3j\xa0\x00V\xbd\x92U\xbb_;\xb6\x97\x16\x98\x9d!#\xaa\xe5\xd9`\xfc\x94t\x98 \x9eE\x830xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0)=0x100, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00') getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x225) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0xf8, r4, 0x1, 0x200, 0x6, @broadcast}, 0x34f) ppoll(&(0x7f0000000080)=[{r0, 0x80}, {}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x8}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000440)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000006c0)=""/233, &(0x7f00000007c0)=0xe9) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x2, 0x10001, 0x9, 0x6, 0x6, 0x100000000, 0x5, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x7, 0xffffffff, 0x8d9, 0x3, 0x7fffffff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r5, 0x3, 0x80, 0x61, 0x1, 0x1f}, &(0x7f0000000340)=0x14) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000004c0)={0xffffffffffffffff, 0x517b, 0x8f93, 0x2, 0x3}) 22:49:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x3, 0x2) bind$inet6(r1, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='hqgetl\x14\x00\x00\x00\t\x00\x00\x00age_ir?\x00\x00\x00es\x00p\x80#\xbe\xc4\xe5\x05\xab\xcd\x7f\xd3so2\xcb\x85o\xd5\x11\xfe.\xb6\xf9\xf2;\xd0\xbe\xa6\xe9\xb9\xa4Aa\xbe\xfb\x9c\xff\xf1', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7f, 0x4) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0xed5efe0f, 0x0, 0x0, 0x20000fff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) bind$alg(0xffffffffffffffff, 0x0, 0x171) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$llc_int(r2, 0x10c, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x841) listen(r1, 0xa) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 22:49:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f0000000280)=@generic, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x63}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80002002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x900, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4040) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xed, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x7, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) [ 175.313328][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:49:47 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="2465c0e574ab", 'veth0_to_team\x00'}}, 0x1e) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000080)=""/69, &(0x7f0000000100)=0x45) 22:49:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) shutdown(r1, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:49:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = accept$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xfffffffffffff695}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x10000, 0x4, 0x5, 0xffffffff, r3}, &(0x7f0000000180)=0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf411, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x1000000]}) 22:49:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x316) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0xfffffffffffffceb, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000) 22:49:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)=0x19) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000002c0)={0x0, @aes256, 0x0, "00000000f9480c98"}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000100)={0x1, 's\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00\xe7\xce]tcS>\x93-\t/5\xc7\xf7\xd09&\xa3B\xf1\x06\x00\x00~\xb3\x9a\x0esV\x7f6\xba\xf2\xa0\xab\xfa\x1f+\xf8=\"\x1e\x1f\xe7\x8e\xa42\xe2H\xfe\x9f\x92\x9a5\x90G\xbd\x93\x80\x8c\xa3\xcbB\x91K\xa3\xda\xd5\xab\xeb\xd2?G\xaeNN\xd0\xf7\x81,9?\\\x12m\xef\xdci\x8a\x87.)\xab\xadwD\xfa\xef\xd9\xad\x18\x01\x97\x89\xb2\x05d\"\xbaQ\xf3G\x14`\xe9\xe1\xe3\xe8\xcd\x18\x84\x91\x87\xe9h\xac^)5\x94\\\xe0\b\xd4\x83Q\xee\x15q@\xe1\xc2\xdd\xc7\xb8\xfc\x7f4nh\xec\x88\xe9A\x8d\xf4\xac,\t\xfbR\xfbp!\x1a\x86\x1dN\x81\xac\xa8\x98\a,\n\x9dd\x04S\"\x0f\xb5\x1c6\xe1\xb2', 0x7a05, 0x1700) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f00000003c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfffffcbe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0xb00000000000074, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1f23a4dded2dd16f}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002cbd7000ffdbdf25030000000800050000000000080003000000000008000600040000000c0004003b0800001300000018000400070000000700000002000000ff0f0000209e0002080003000300000008000300b6000000080002004479000008000300070000000800060067000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 22:49:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400000800448d2, 0x0) 22:49:47 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000400)=""/68, 0x44}], 0x7, &(0x7f0000000500)=""/200, 0xc8}, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)='erspan0\x00', 0x4, 0x0, 0x3ff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'ip6erspan0\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000680)={'broute\x00'}, &(0x7f0000000700)=0x78) accept4$nfc_llcp(r0, &(0x7f0000000800), &(0x7f0000000880)=0x60, 0x80800) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x2000, 0x100000010a000202) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 22:49:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, {0x6, 0x17c4, 0x401, 0x1, 0x0, 0x401}}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000003e, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x4e23, @local}}) close(r1) [ 175.853437][ T9285] IPVS: ftp: loaded support on port[0] = 21 22:49:47 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt(r0, 0x114, 0x2714, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) [ 176.074276][ T27] audit: type=1804 audit(1559602187.674:37): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir642213476/syzkaller.GpocCN/11/memory.events" dev="sda1" ino=16593 res=1 22:49:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xde3b07d581ac8aff}, 0x0) syz_emit_ethernet(0x21a, &(0x7f000070aef1)={@local, @empty=[0x3, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x14, 0x4e20, 0x8}}}}}, 0x0) 22:49:47 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x8004e24, @remote}, {0x1}, 0x20, {0x2, 0x4e22, @rand_addr=0x16e5}, 'rose0\x00'}) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:49:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendto$inet(r0, &(0x7f0000000040)="e76528e7ca99669df726171371f87810c7884014ab627918e1c2d94987b572f407ba65cf8e4e64676de9bc8b82c5003b52c022ee106f19bb3139bcc6c8f3058564bd51403fabed2e18f1a406bae8bb2689e43e67704cc9d7aca8e269108c090b3e3db79a9901f53b5b3c", 0x6a, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x7f}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x8, 0x4, 0x20000000000009}, 0x3c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x3, 0x7f) pipe(&(0x7f0000000380)) getsockname(r2, &(0x7f0000000480)=@pppol2tp, &(0x7f0000000500)=0x80) accept(r0, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000006c0)=0x80) pipe(&(0x7f0000000700)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r2}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r5, 0x302, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="961ab7b11daf8dc941937db3b2900a1c"}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="2d993e9e6ebb3d731f50ae36cc7dd143"}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}]}, 0x120}}, 0x20000001) close(r1) [ 176.263171][ T9308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:49:47 executing program 5: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000100)={@broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast}, 0xc) r1 = epoll_create1(0x0) poll(&(0x7f0000000080)=[{r1, 0x7081}], 0x1, 0xffef) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1b, 0x6, 0x100) getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000140), &(0x7f0000000200)=0x4) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x4e52, 0x0, 0x0) poll(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x80000005}) [ 176.300006][ T27] audit: type=1804 audit(1559602187.894:38): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir642213476/syzkaller.GpocCN/11/memory.events" dev="sda1" ino=16593 res=1 [ 176.376697][ T27] audit: type=1800 audit(1559602187.894:39): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16593 res=0 22:49:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x100000000, 0x6, [0x3, 0x1, 0x8, 0x7, 0x4, 0x6]}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r1, 0x4}, &(0x7f0000000380)=0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000002000)=@ax25={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) 22:49:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000001c0)=0x100000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x101}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0x80, 0x4, 0x3, 0x1ff, 0x80000001000000}, &(0x7f00000004c0)=0x14) r5 = socket$inet6(0xa, 0x7, 0x7fff) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000001a80)) close(r2) close(r0) accept4(r5, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000340)=0x80, 0x80800) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={r9, 0x7}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 22:49:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x10076) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0xad96, 0x200ff}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x11}) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, r2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 22:49:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) r1 = accept(r0, &(0x7f0000001980)=@generic, &(0x7f0000001a00)=0x80) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000001a40)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vcan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f}}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000000c0)='veth1\x00') 22:49:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x1245d819, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x23, 0x200847, 0x0, 0x0, {0x2804, 0x7b5f7}, [@typed={0x10, 0x11, @str=':%/ime_type\x00'}]}, 0xbe}}, 0x0) r2 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) r3 = accept(r1, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x6}, @mss={0x2, 0x702bd0ab}], 0x2) [ 176.869246][ T27] audit: type=1800 audit(1559602188.464:40): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=68756765746C04 dev="sda1" ino=16599 res=0 22:49:48 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000400)=""/68, 0x44}], 0x7, &(0x7f0000000500)=""/200, 0xc8}, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)='erspan0\x00', 0x4, 0x0, 0x3ff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'ip6erspan0\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000680)={'broute\x00'}, &(0x7f0000000700)=0x78) accept4$nfc_llcp(r0, &(0x7f0000000800), &(0x7f0000000880)=0x60, 0x80800) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x2000, 0x100000010a000202) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 22:49:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffe87, &(0x7f0000024000)=[{&(0x7f0000000180)="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", 0x4c}], 0x1}, 0x0) 22:49:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="7f040000000000000720000000000602060000000000000000002000000000000000e42e77f646000800000000000000"], 0x30) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0xb0, @rand_addr, 0x105}, 0xfffffda3) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0), 0x4) connect$inet6(r0, &(0x7f00000045c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x1, @broadcast}) 22:49:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x40, 0x119, 0x0, 0x40000000000000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40002000c020}, 0x0) 22:49:48 executing program 0: unshare(0x20000200) unshare(0x28020400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x80) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x21, 0xf0, &(0x7f0000000600)="268b160f7dd468f205cae6e6c21082ed2194cd01bb5dd2da9b8f5bdd648a7d6021", &(0x7f0000000640)=""/240, 0x7}, 0x28) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xff17) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@rand_addr="b4ec4a3894d6ea175f18dcf74e55dff4", @in6=@rand_addr="7edf58430e87d755a794ed1ca93e7b22", 0x4e21, 0x0, 0x4e20, 0x482, 0xa, 0x0, 0x80, 0xff, r1, r3}, {0x1f, 0x4, 0x7, 0x1070, 0x9, 0x80, 0x81, 0x1}, {0x1c3a, 0x0, 0xe98, 0x10000}, 0xa6, 0x6e6bb9, 0x0, 0x0, 0x2, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x4d2, 0xff}, 0xa, @in=@multicast2, 0x3501, 0x3, 0x2, 0x8000, 0x1f, 0x100, 0x7f}}, 0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0xa, 0xc4, {0x0, 0x7530}, {0x77359400}, {0x4, 0x9, 0x3f, 0x7}, 0x1, @can={{0x0, 0x3000, 0x0, 0x9}, 0x2, 0x2, 0x0, 0x0, "0a33355cb8d26300"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000000) [ 177.139418][ T9350] sysfs: cannot create duplicate filename '/class/ieee80211/:%!ime_type' 22:49:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x6, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x20, 0x3b, 0xfffffffffffffff7, 0x3, 0x5}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={r2, 0x0, 0x100000000, 0x8, 0x5, 0x7}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r3, 0x1}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0xfffffd6c, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x19, 0x7ffffff9, 0xf0ffffff00000000, 0x0, {0x1}, [@typed={0x14, 0x1, @ipv6=@loopback}]}, 0x28}}, 0x0) [ 177.188960][ T9350] CPU: 0 PID: 9350 Comm: syz-executor.1 Not tainted 5.2.0-rc2+ #13 [ 177.196936][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.203192][ T9364] IPVS: ftp: loaded support on port[0] = 21 [ 177.207009][ T9350] Call Trace: [ 177.216252][ T9350] dump_stack+0x172/0x1f0 [ 177.220615][ T9350] sysfs_warn_dup.cold+0x1c/0x31 [ 177.225567][ T9350] sysfs_do_create_link_sd.isra.0+0x120/0x140 [ 177.231649][ T9350] sysfs_create_link+0x65/0xc0 [ 177.236458][ T9350] device_add+0x75c/0x17a0 [ 177.240890][ T9350] ? get_device_parent.isra.0+0x560/0x560 [ 177.246625][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.252902][ T9350] wiphy_register+0x1ab0/0x25f0 [ 177.257768][ T9350] ? wiphy_unregister+0xfd0/0xfd0 [ 177.262822][ T9350] ? rcu_read_lock_sched_held+0x110/0x130 [ 177.268552][ T9350] ? __kmalloc+0x5d2/0x740 [ 177.272976][ T9350] ? mark_held_locks+0xa4/0xf0 [ 177.277758][ T9350] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 177.283583][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.289855][ T9350] ieee80211_register_hw+0x177b/0x3e50 [ 177.295333][ T9350] ? ieee80211_ifa_changed+0xd80/0xd80 [ 177.300804][ T9350] ? memset+0x32/0x40 [ 177.304797][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.311067][ T9350] ? __hrtimer_init+0xe1/0x250 [ 177.315875][ T9350] mac80211_hwsim_new_radio+0x2030/0x4250 [ 177.321622][ T9350] ? hwsim_cloned_frame_received_nl+0x1560/0x1560 [ 177.328057][ T9350] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 177.333961][ T9350] hwsim_new_radio_nl+0x9e3/0x1070 [ 177.339088][ T9350] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 177.344999][ T9350] ? nla_memcpy+0xb0/0xb0 [ 177.349349][ T9350] ? __nla_parse+0x43/0x60 [ 177.353787][ T9350] genl_family_rcv_msg+0x74b/0xf90 [ 177.358918][ T9350] ? genl_unregister_family+0x790/0x790 [ 177.364478][ T9350] ? __lock_acquire+0x54f/0x5490 [ 177.369428][ T9350] ? __local_bh_enable_ip+0x15a/0x270 [ 177.374816][ T9350] ? __dev_queue_xmit+0xb9c/0x36b0 [ 177.379957][ T9350] genl_rcv_msg+0xca/0x16c [ 177.384385][ T9350] netlink_rcv_skb+0x177/0x450 [ 177.389158][ T9350] ? genl_family_rcv_msg+0xf90/0xf90 [ 177.394456][ T9350] ? netlink_ack+0xb50/0xb50 [ 177.399055][ T9350] ? lock_acquire+0x16f/0x3f0 [ 177.403747][ T9350] ? kasan_check_write+0x14/0x20 [ 177.408697][ T9350] genl_rcv+0x29/0x40 [ 177.412685][ T9350] netlink_unicast+0x531/0x710 [ 177.417462][ T9350] ? netlink_attachskb+0x770/0x770 [ 177.422587][ T9350] ? _copy_from_iter_full+0x25d/0x8c0 [ 177.427969][ T9350] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 177.433698][ T9350] ? __check_object_size+0x3d/0x42f 22:49:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0x12) sendfile(r1, r2, &(0x7f0000000080)=0xe, 0x12) [ 177.438915][ T9350] netlink_sendmsg+0x8ae/0xd70 [ 177.443698][ T9350] ? netlink_unicast+0x710/0x710 [ 177.448646][ T9350] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 177.454205][ T9350] ? apparmor_socket_sendmsg+0x2a/0x30 [ 177.459679][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.465925][ T9350] ? security_socket_sendmsg+0x8d/0xc0 [ 177.471483][ T9350] ? netlink_unicast+0x710/0x710 [ 177.476435][ T9350] sock_sendmsg+0xd7/0x130 [ 177.480867][ T9350] ___sys_sendmsg+0x803/0x920 [ 177.485557][ T9350] ? copy_msghdr_from_user+0x430/0x430 [ 177.491042][ T9350] ? kasan_check_read+0x11/0x20 [ 177.495907][ T9350] ? __fget+0x381/0x550 [ 177.500072][ T9350] ? ksys_dup3+0x3e0/0x3e0 [ 177.504504][ T9350] ? lock_downgrade+0x880/0x880 [ 177.509368][ T9350] ? __fget_light+0x1a9/0x230 [ 177.514064][ T9350] ? __fdget+0x1b/0x20 [ 177.518151][ T9350] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.524398][ T9350] __sys_sendmsg+0x105/0x1d0 [ 177.528995][ T9350] ? __ia32_sys_shutdown+0x80/0x80 [ 177.534131][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c 22:49:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x200000000000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 177.539596][ T9350] ? do_syscall_64+0x26/0x680 [ 177.544278][ T9350] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.544294][ T9350] ? do_syscall_64+0x26/0x680 [ 177.544315][ T9350] __x64_sys_sendmsg+0x78/0xb0 [ 177.544335][ T9350] do_syscall_64+0xfd/0x680 [ 177.544351][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.544361][ T9350] RIP: 0033:0x459279 [ 177.544376][ T9350] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 177.544382][ T9350] RSP: 002b:00007f6bb22f0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.544393][ T9350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 177.544400][ T9350] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 177.544406][ T9350] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 177.544413][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6bb22f16d4 22:49:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000006f0e89700000000000000000000006115700000871fb6bd02c800"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 177.564468][ T9350] R13: 00000000004c6cdf R14: 00000000004dbb08 R15: 00000000ffffffff 22:49:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1}, {0x6}, 0x4, {0x2, 0x4e24, @multicast1}, 'bcsf0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x259) 22:49:49 executing program 0: unshare(0x20000200) unshare(0x28020400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x80) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x21, 0xf0, &(0x7f0000000600)="268b160f7dd468f205cae6e6c21082ed2194cd01bb5dd2da9b8f5bdd648a7d6021", &(0x7f0000000640)=""/240, 0x7}, 0x28) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xff17) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@rand_addr="b4ec4a3894d6ea175f18dcf74e55dff4", @in6=@rand_addr="7edf58430e87d755a794ed1ca93e7b22", 0x4e21, 0x0, 0x4e20, 0x482, 0xa, 0x0, 0x80, 0xff, r1, r3}, {0x1f, 0x4, 0x7, 0x1070, 0x9, 0x80, 0x81, 0x1}, {0x1c3a, 0x0, 0xe98, 0x10000}, 0xa6, 0x6e6bb9, 0x0, 0x0, 0x2, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x4d2, 0xff}, 0xa, @in=@multicast2, 0x3501, 0x3, 0x2, 0x8000, 0x1f, 0x100, 0x7f}}, 0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0xa, 0xc4, {0x0, 0x7530}, {0x77359400}, {0x4, 0x9, 0x3f, 0x7}, 0x1, @can={{0x0, 0x3000, 0x0, 0x9}, 0x2, 0x2, 0x0, 0x0, "0a33355cb8d26300"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000000) 22:49:49 executing program 3: r0 = socket$inet6(0xa, 0x200000006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = accept(r0, 0x0, &(0x7f00000003c0)) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004900)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffff}) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0xa8) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="baa21c59c4d352ad56a85b4048b0d1605e2008c21950ab229af4e18ee08de6d17348b46d1de5497bfd0ef4e88a20647962a69336b46be7e40dbba1a0899cb5083c94e024f42edb0a50a3359ad1d30e04f41669d91445b4bed397340e9ad966a46a9203cfab8bb8ac3572daafe04569b4b813e87856d192fac18ac79a6103e993"], 0x80) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="323900009ea59d5140a7292781114a00497ec13f07f60000006f9083262cfd691f"], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="00032cbd7000fbdbfcffffff00000000000009410000004c0018800000016574680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bbbffa9c4d1ea3a2883000309ca4ed9ddb75c68c2b3776586190a0eb0936e480fcfe37765e6bf664e7e8d52fdd6f5d7b528d27cf681aa1f87ab5f6edfa0e7567057a740da52dc61c72e9b84a5fa9e68bf269ddef333e966d606deeb94c310b646f4c1313f0830a5d8d7c8edde02a7a70b59806af91e02e4450eadf9843000bf81cd090c65fb786affef06fc6c84ba9282c49bca184949e"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xc001) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r5, r1, 0xf, 0x2}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000240)=0x14, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000003b5ffff808fdb006a68baad8bc209a9557d4bdcf38fd00d2d88c8f07610ae1b5f5d8b4cf0c00feeee0a526029fa0a1e1b59f98fdaba0144f1912aecb8f0a4d4ebcc1f0f1c0fb00d89a76f1034"], 0x14}}, 0x0) recvmmsg(r6, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 178.024560][ T27] audit: type=1804 audit(1559602189.624:41): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir229297877/syzkaller.IYw07Z/17/memory.events" dev="sda1" ino=16606 res=1 [ 178.114921][ T9369] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 178.327966][ T27] audit: type=1804 audit(1559602189.924:42): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir229297877/syzkaller.IYw07Z/17/memory.events" dev="sda1" ino=16606 res=1 22:49:50 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000001e0007041dfffd946f610500020000000400000000000000080001000400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@loopback, r2}, 0x14) 22:49:50 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000400)=""/68, 0x44}], 0x7, &(0x7f0000000500)=""/200, 0xc8}, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)='erspan0\x00', 0x4, 0x0, 0x3ff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'ip6erspan0\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000680)={'broute\x00'}, &(0x7f0000000700)=0x78) accept4$nfc_llcp(r0, &(0x7f0000000800), &(0x7f0000000880)=0x60, 0x80800) r1 = openat$c