syzkaller login: [ 242.485746][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 242.585340][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 242.621549][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 242.692223][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:62648' (ECDSA) to the list of known hosts. 1970/01/01 00:04:49 fuzzer started 1970/01/01 00:05:00 dialing manager at localhost:35065 1970/01/01 00:05:04 syscalls: 2768 1970/01/01 00:05:04 code coverage: enabled 1970/01/01 00:05:04 comparison tracing: enabled 1970/01/01 00:05:04 extra coverage: enabled 1970/01/01 00:05:04 setuid sandbox: enabled 1970/01/01 00:05:04 namespace sandbox: enabled 1970/01/01 00:05:04 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:04 fault injection: enabled 1970/01/01 00:05:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:04 net packet injection: enabled 1970/01/01 00:05:04 net device setup: enabled 1970/01/01 00:05:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:04 USB emulation: enabled 1970/01/01 00:05:04 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:04 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:04 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:08 fetching corpus: 50, signal 21262/22909 (executing program) 1970/01/01 00:05:12 fetching corpus: 100, signal 30100/33083 (executing program) 1970/01/01 00:05:14 fetching corpus: 150, signal 36298/40475 (executing program) 1970/01/01 00:05:16 fetching corpus: 200, signal 40934/46154 (executing program) 1970/01/01 00:05:19 fetching corpus: 250, signal 43573/49864 (executing program) 1970/01/01 00:05:21 fetching corpus: 300, signal 46715/53940 (executing program) 1970/01/01 00:05:24 fetching corpus: 350, signal 49439/57536 (executing program) 1970/01/01 00:05:26 fetching corpus: 400, signal 52324/61168 (executing program) 1970/01/01 00:05:29 fetching corpus: 450, signal 55538/64961 (executing program) 1970/01/01 00:05:31 fetching corpus: 500, signal 57486/67647 (executing program) 1970/01/01 00:05:33 fetching corpus: 550, signal 60404/71010 (executing program) 1970/01/01 00:05:35 fetching corpus: 600, signal 61971/73237 (executing program) 1970/01/01 00:05:37 fetching corpus: 650, signal 63613/75473 (executing program) 1970/01/01 00:05:39 fetching corpus: 700, signal 66142/78272 (executing program) 1970/01/01 00:05:41 fetching corpus: 750, signal 68292/80750 (executing program) 1970/01/01 00:05:43 fetching corpus: 800, signal 69689/82584 (executing program) 1970/01/01 00:05:45 fetching corpus: 850, signal 71241/84504 (executing program) 1970/01/01 00:05:47 fetching corpus: 900, signal 72785/86345 (executing program) 1970/01/01 00:05:49 fetching corpus: 950, signal 74355/88197 (executing program) 1970/01/01 00:05:50 fetching corpus: 1000, signal 75164/89448 (executing program) 1970/01/01 00:05:52 fetching corpus: 1050, signal 76666/91109 (executing program) 1970/01/01 00:05:53 fetching corpus: 1100, signal 77442/92273 (executing program) 1970/01/01 00:05:55 fetching corpus: 1150, signal 78447/93554 (executing program) 1970/01/01 00:05:57 fetching corpus: 1200, signal 79274/94728 (executing program) 1970/01/01 00:05:59 fetching corpus: 1250, signal 79879/95726 (executing program) 1970/01/01 00:06:01 fetching corpus: 1300, signal 80669/96844 (executing program) 1970/01/01 00:06:03 fetching corpus: 1350, signal 81520/97883 (executing program) 1970/01/01 00:06:05 fetching corpus: 1400, signal 82398/98924 (executing program) 1970/01/01 00:06:08 fetching corpus: 1450, signal 83709/100194 (executing program) 1970/01/01 00:06:10 fetching corpus: 1500, signal 85291/101506 (executing program) 1970/01/01 00:06:11 fetching corpus: 1550, signal 86667/102669 (executing program) 1970/01/01 00:06:13 fetching corpus: 1600, signal 87428/103501 (executing program) 1970/01/01 00:06:15 fetching corpus: 1650, signal 87901/104210 (executing program) 1970/01/01 00:06:18 fetching corpus: 1700, signal 88878/105095 (executing program) 1970/01/01 00:06:19 fetching corpus: 1750, signal 89588/105831 (executing program) 1970/01/01 00:06:23 fetching corpus: 1800, signal 90347/106610 (executing program) 1970/01/01 00:06:25 fetching corpus: 1850, signal 90915/107268 (executing program) 1970/01/01 00:06:27 fetching corpus: 1900, signal 91365/107851 (executing program) 1970/01/01 00:06:29 fetching corpus: 1950, signal 92800/108750 (executing program) 1970/01/01 00:06:31 fetching corpus: 2000, signal 93267/109323 (executing program) 1970/01/01 00:06:33 fetching corpus: 2050, signal 93769/109882 (executing program) 1970/01/01 00:06:35 fetching corpus: 2100, signal 94273/110416 (executing program) 1970/01/01 00:06:37 fetching corpus: 2150, signal 95509/111134 (executing program) 1970/01/01 00:06:39 fetching corpus: 2200, signal 96248/111704 (executing program) 1970/01/01 00:06:41 fetching corpus: 2250, signal 96841/112191 (executing program) 1970/01/01 00:06:44 fetching corpus: 2300, signal 97381/112629 (executing program) 1970/01/01 00:06:46 fetching corpus: 2350, signal 97915/113051 (executing program) 1970/01/01 00:06:48 fetching corpus: 2400, signal 98397/113466 (executing program) 1970/01/01 00:06:50 fetching corpus: 2450, signal 99147/113843 (executing program) 1970/01/01 00:06:51 fetching corpus: 2500, signal 99746/114210 (executing program) 1970/01/01 00:06:53 fetching corpus: 2550, signal 100220/114568 (executing program) 1970/01/01 00:06:55 fetching corpus: 2600, signal 100847/114931 (executing program) 1970/01/01 00:06:57 fetching corpus: 2650, signal 101566/115272 (executing program) 1970/01/01 00:06:59 fetching corpus: 2700, signal 102208/115573 (executing program) 1970/01/01 00:07:03 fetching corpus: 2750, signal 103108/115851 (executing program) 1970/01/01 00:07:05 fetching corpus: 2800, signal 103667/116078 (executing program) 1970/01/01 00:07:06 fetching corpus: 2825, signal 103974/116334 (executing program) 1970/01/01 00:07:06 fetching corpus: 2825, signal 103974/116546 (executing program) 1970/01/01 00:07:06 fetching corpus: 2825, signal 103974/116586 (executing program) 1970/01/01 00:07:06 fetching corpus: 2825, signal 103974/116586 (executing program) 1970/01/01 00:08:31 starting 2 fuzzer processes 00:08:47 executing program 0: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x1000, 0x8, {{0x6, 0x4, 0x1, 0x16, 0x18, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x4, 0x2, 0x3, 0x9}]}}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xa35a, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x81) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, [], 0x10}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x9, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x16, 0x0, r4}, {0x3abb, 0x994, 0x1, 0x5, 0xbb, 0x0, 0x5, 0x8}, {0xd96, 0x3, 0x2, 0xffffffff7fffffff}, 0xfffffffb, 0x6e6bbf, 0x2, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4d2, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x3505, 0x3, 0x2, 0x20, 0x8f36, 0x80000001, 0x7}}, 0xe8) r5 = accept$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000004c0)={@empty, @empty, @private2={0xfc, 0x2, [], 0x1}, 0x3, 0x0, 0x3, 0x0, 0x9, 0x4040000, r6}) recvmmsg(r1, &(0x7f0000007a40)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/131, 0x83}], 0x3, &(0x7f0000001780)=""/252, 0xfc}}, {{&(0x7f0000001880)=@nfc, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001900)=""/131, 0x83}, {&(0x7f00000019c0)=""/143, 0x8f}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/190, 0xbe}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/152, 0x98}, {&(0x7f0000002d00)=""/163, 0xa3}, {&(0x7f0000002dc0)=""/61, 0x3d}, {&(0x7f0000002e00)=""/136, 0x88}], 0x9, &(0x7f0000002f80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003f80)=@sco, 0x80, &(0x7f0000004240)=[{&(0x7f0000004000)=""/23, 0x17}, {&(0x7f0000004040)=""/213, 0xd5}, {&(0x7f0000004140)=""/75, 0x4b}, {&(0x7f00000041c0)=""/75, 0x4b}], 0x4, &(0x7f0000004280)=""/113, 0x71}, 0x5}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004300)=""/202, 0xca}, {&(0x7f0000004400)=""/238, 0xee}, {&(0x7f0000004500)=""/5, 0x5}, {&(0x7f0000004540)=""/190, 0xbe}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x5, &(0x7f0000005680)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f0000006680)=""/27, 0x1b}, {&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)=""/167, 0xa7}, {&(0x7f0000007780)=""/154, 0x9a}, {&(0x7f0000007840)=""/122, 0x7a}], 0x5, &(0x7f0000007940)=""/254, 0xfe}, 0x3}], 0x5, 0x10021, &(0x7f0000007b80)={0x0, 0x989680}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000007bc0)='/dev/hwrng\x00', 0x408000, 0x0) getsockname$packet(r7, &(0x7f0000007c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007c40)=0x14) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000007d80)={&(0x7f0000007c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007d40)={&(0x7f0000007cc0)={0x6c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xf}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x54) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000007f00)={&(0x7f0000007dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007e00)={0x84, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000404) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007f40)='/dev/vcs\x00', 0x40002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000008000)={'syztnl1\x00', &(0x7f0000007f80)={'syztnl0\x00', r2, 0x29, 0xea, 0x4, 0x636dca3b, 0x66, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x80, 0x8000, 0x8a, 0x9}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008080)='ethtool\x00', r9) getsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f00000080c0)={@loopback, 0x0}, &(0x7f0000008100)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000081c0)={'erspan0\x00', &(0x7f0000008140)={'syztnl2\x00', r0, 0x8000, 0x700, 0x81, 0x7, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x66, 0x0, 0xb, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x4, [{@multicast1, 0x400}, {@remote, 0x2}, {@multicast2, 0xd38f}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000008380)={&(0x7f0000008040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000008340)={&(0x7f0000008200)={0x10c, r11, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8002}, 0x4085) 00:09:10 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x4, 0xa7f9, 0x8}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x3e9, 0x100, 0x70bd25, 0x25dfdbfd, {0x4, 0x0, 0x2, r1, 0x2, 0x10001, 0x7, 0x200, 0x0, 0x4}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4008080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd751dfb9b890749e}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, 0x453, 0xc34, 0xfff, 0x25dfdbfd, "12db4bc5740faeb4ff9045fc97bcb181b6b2549858b35bac6a340a36516ab19fcf447f885b65b31eb0c1e38eeaaccdd928ec298bd00748dd0f541695b5279b0968da91ef284379dae580b594da5a60fb80223538a3bdd92622cc2e17be7e13c9bfc9e0ff181f8591eeae8466d9468bd02197fb246bb9af87b12a3a192e50d3f6dd8cc1be51f15b9a880fea82a214e9579400629f80f14fafa414b30c52014558c769e4b2750747215bf45092fd43ce2827173c96e423a64ba7d8a6fa86caacdd01544fbd6e5d13", ["", "", "", "", "", "", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000380)='/dev/vcsu#\x00', 0x7, 0x18000) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x4d6, @private2={0xfc, 0x2, [], 0x1}, 0x3}, 0x1c) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sync_file_range(0xffffffffffffffff, 0x0, 0xffffffff, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000580)=0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000005c0)=""/50, &(0x7f0000000600)=0x32) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r2, 0x0) sendmsg$inet(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="424544dc172e5dd4e73788d1213e01e1", 0x10}, {&(0x7f0000000680)="34e9b2e47b71678ba6885a0c9c197c67a1c10d03abadc9249eadf3f34bb94f458bfff6a6fac636f43d0a01fad8d2da8ef060bb716d6c94ebcdc64a23b03ba16e7a42306b95955acb122850c4b6f7df32bcc7470b1d1e260c4f0df868da07494c9f0b39a98711b59b00d315c60c96a47a5530a8", 0x73}], 0x2, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xc6, 0x3, 0x7, [{@broadcast, 0x3}, {@rand_addr=0x64010101, 0x36}, {@local, 0x401}, {@broadcast, 0x9}, {@multicast2}]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x95, 0x0, 0x5, [0x2, 0x401, 0x9, 0x10000, 0xec4b, 0x6, 0x20, 0x790, 0x7]}, @cipso={0x86, 0x28, 0x3, [{0x6, 0x10, "dd8358eceadfe2d8c430a246c683"}, {0x2, 0x12, "c788ada83c53546ec249f009c17e8a1a"}]}]}}}], 0xc0}, 0x20000000) sendto(r0, &(0x7f0000000840)="9cac3960097973a7f48f68395f55e2e6d9a9d927cd7bd9442c904973235f33a80b300452c12e20da4ba3475e57aea83b104e9054c8f900f2713b83f53ae0e421351533a191ff53248c058155a21ad6abfb1add3e7b9861ff57b6c306ae79abe08743ef0f1bbf3452dc87041c6c0fa5b26cacfb369a4574d82bd15f722decbff947b34c928e37a94bb5a6907667742eb4e726e0e504f0eb6f485f29121940dbc70fd9c81ea20fa191417a088be3403bebe697603879fa4abbd30569f383b765aa416a80", 0xc3, 0x81, &(0x7f0000000940)=@x25={0x9, @remote={[], 0x1}}, 0x80) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) chroot(&(0x7f0000000ac0)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000b00)='./file0/file0\x00', &(0x7f0000000b40)='security.evm\x00', &(0x7f0000000b80)=@v1={0x2, "dceafeea503a52a267f7809b4d86"}, 0xf, 0x0) [ 554.476139][ T3071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.640043][ T3071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.059963][ T3071] device hsr_slave_0 entered promiscuous mode [ 563.107904][ T3071] device hsr_slave_1 entered promiscuous mode [ 567.704401][ T3071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.861105][ T3071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.969689][ T3071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 568.127869][ T3071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 577.756861][ T3071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.165863][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.279768][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.295899][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.342508][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.429033][ T3229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.567829][ T3229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.167795][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 585.208490][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.386912][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 585.557091][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.979638][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.022333][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.207532][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.252368][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.455731][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.386541][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 587.389441][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 595.792498][ T3229] device hsr_slave_0 entered promiscuous mode [ 595.840169][ T3229] device hsr_slave_1 entered promiscuous mode [ 595.907037][ T3229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.912149][ T3229] Cannot create hsr debugfs directory [ 602.035255][ T3229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.197879][ T3229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.331116][ T3229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.478915][ T3229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.385181][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 603.427052][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.753745][ C0] hrtimer: interrupt took 20050000 ns [ 609.980333][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.040975][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.146457][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.198195][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.406893][ T3071] device veth0_vlan entered promiscuous mode [ 611.022431][ T3071] device veth1_vlan entered promiscuous mode [ 613.489025][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 613.631411][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 614.007655][ T3071] device veth0_macvtap entered promiscuous mode [ 614.612945][ T3229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.782166][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 615.126637][ T3071] device veth1_macvtap entered promiscuous mode [ 616.080094][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 616.130447][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.150222][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 617.201917][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 617.822040][ T3071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.828646][ T3071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.832422][ T3071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.878836][ T3071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.022238][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.081160][ T3361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.851077][ T3071] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 625.836172][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.936392][ T1852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.149480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 626.208122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.417496][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 626.749219][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.512789][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 627.560067][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.020142][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.088265][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.417380][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 630.261270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.267726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:10:30 executing program 0: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x1000, 0x8, {{0x6, 0x4, 0x1, 0x16, 0x18, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x4, 0x2, 0x3, 0x9}]}}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xa35a, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x81) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, [], 0x10}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x9, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x16, 0x0, r4}, {0x3abb, 0x994, 0x1, 0x5, 0xbb, 0x0, 0x5, 0x8}, {0xd96, 0x3, 0x2, 0xffffffff7fffffff}, 0xfffffffb, 0x6e6bbf, 0x2, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4d2, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x3505, 0x3, 0x2, 0x20, 0x8f36, 0x80000001, 0x7}}, 0xe8) r5 = accept$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000004c0)={@empty, @empty, @private2={0xfc, 0x2, [], 0x1}, 0x3, 0x0, 0x3, 0x0, 0x9, 0x4040000, r6}) recvmmsg(r1, &(0x7f0000007a40)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/131, 0x83}], 0x3, &(0x7f0000001780)=""/252, 0xfc}}, {{&(0x7f0000001880)=@nfc, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001900)=""/131, 0x83}, {&(0x7f00000019c0)=""/143, 0x8f}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/190, 0xbe}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/152, 0x98}, {&(0x7f0000002d00)=""/163, 0xa3}, {&(0x7f0000002dc0)=""/61, 0x3d}, {&(0x7f0000002e00)=""/136, 0x88}], 0x9, &(0x7f0000002f80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003f80)=@sco, 0x80, &(0x7f0000004240)=[{&(0x7f0000004000)=""/23, 0x17}, {&(0x7f0000004040)=""/213, 0xd5}, {&(0x7f0000004140)=""/75, 0x4b}, {&(0x7f00000041c0)=""/75, 0x4b}], 0x4, &(0x7f0000004280)=""/113, 0x71}, 0x5}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004300)=""/202, 0xca}, {&(0x7f0000004400)=""/238, 0xee}, {&(0x7f0000004500)=""/5, 0x5}, {&(0x7f0000004540)=""/190, 0xbe}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x5, &(0x7f0000005680)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f0000006680)=""/27, 0x1b}, {&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)=""/167, 0xa7}, {&(0x7f0000007780)=""/154, 0x9a}, {&(0x7f0000007840)=""/122, 0x7a}], 0x5, &(0x7f0000007940)=""/254, 0xfe}, 0x3}], 0x5, 0x10021, &(0x7f0000007b80)={0x0, 0x989680}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000007bc0)='/dev/hwrng\x00', 0x408000, 0x0) getsockname$packet(r7, &(0x7f0000007c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007c40)=0x14) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000007d80)={&(0x7f0000007c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007d40)={&(0x7f0000007cc0)={0x6c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xf}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x54) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000007f00)={&(0x7f0000007dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007e00)={0x84, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000404) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007f40)='/dev/vcs\x00', 0x40002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000008000)={'syztnl1\x00', &(0x7f0000007f80)={'syztnl0\x00', r2, 0x29, 0xea, 0x4, 0x636dca3b, 0x66, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x80, 0x8000, 0x8a, 0x9}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008080)='ethtool\x00', r9) getsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f00000080c0)={@loopback, 0x0}, &(0x7f0000008100)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000081c0)={'erspan0\x00', &(0x7f0000008140)={'syztnl2\x00', r0, 0x8000, 0x700, 0x81, 0x7, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x66, 0x0, 0xb, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x4, [{@multicast1, 0x400}, {@remote, 0x2}, {@multicast2, 0xd38f}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000008380)={&(0x7f0000008040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000008340)={&(0x7f0000008200)={0x10c, r11, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8002}, 0x4085) 00:10:39 executing program 0: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x1000, 0x8, {{0x6, 0x4, 0x1, 0x16, 0x18, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x4, 0x2, 0x3, 0x9}]}}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xa35a, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x81) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, [], 0x10}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x9, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x16, 0x0, r4}, {0x3abb, 0x994, 0x1, 0x5, 0xbb, 0x0, 0x5, 0x8}, {0xd96, 0x3, 0x2, 0xffffffff7fffffff}, 0xfffffffb, 0x6e6bbf, 0x2, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4d2, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x3505, 0x3, 0x2, 0x20, 0x8f36, 0x80000001, 0x7}}, 0xe8) r5 = accept$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000004c0)={@empty, @empty, @private2={0xfc, 0x2, [], 0x1}, 0x3, 0x0, 0x3, 0x0, 0x9, 0x4040000, r6}) recvmmsg(r1, &(0x7f0000007a40)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/131, 0x83}], 0x3, &(0x7f0000001780)=""/252, 0xfc}}, {{&(0x7f0000001880)=@nfc, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001900)=""/131, 0x83}, {&(0x7f00000019c0)=""/143, 0x8f}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/190, 0xbe}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/152, 0x98}, {&(0x7f0000002d00)=""/163, 0xa3}, {&(0x7f0000002dc0)=""/61, 0x3d}, {&(0x7f0000002e00)=""/136, 0x88}], 0x9, &(0x7f0000002f80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003f80)=@sco, 0x80, &(0x7f0000004240)=[{&(0x7f0000004000)=""/23, 0x17}, {&(0x7f0000004040)=""/213, 0xd5}, {&(0x7f0000004140)=""/75, 0x4b}, {&(0x7f00000041c0)=""/75, 0x4b}], 0x4, &(0x7f0000004280)=""/113, 0x71}, 0x5}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004300)=""/202, 0xca}, {&(0x7f0000004400)=""/238, 0xee}, {&(0x7f0000004500)=""/5, 0x5}, {&(0x7f0000004540)=""/190, 0xbe}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x5, &(0x7f0000005680)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f0000006680)=""/27, 0x1b}, {&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)=""/167, 0xa7}, {&(0x7f0000007780)=""/154, 0x9a}, {&(0x7f0000007840)=""/122, 0x7a}], 0x5, &(0x7f0000007940)=""/254, 0xfe}, 0x3}], 0x5, 0x10021, &(0x7f0000007b80)={0x0, 0x989680}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000007bc0)='/dev/hwrng\x00', 0x408000, 0x0) getsockname$packet(r7, &(0x7f0000007c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007c40)=0x14) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000007d80)={&(0x7f0000007c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007d40)={&(0x7f0000007cc0)={0x6c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xf}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x54) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000007f00)={&(0x7f0000007dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007e00)={0x84, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000404) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007f40)='/dev/vcs\x00', 0x40002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000008000)={'syztnl1\x00', &(0x7f0000007f80)={'syztnl0\x00', r2, 0x29, 0xea, 0x4, 0x636dca3b, 0x66, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x80, 0x8000, 0x8a, 0x9}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008080)='ethtool\x00', r9) getsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f00000080c0)={@loopback, 0x0}, &(0x7f0000008100)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000081c0)={'erspan0\x00', &(0x7f0000008140)={'syztnl2\x00', r0, 0x8000, 0x700, 0x81, 0x7, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x66, 0x0, 0xb, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x4, [{@multicast1, 0x400}, {@remote, 0x2}, {@multicast2, 0xd38f}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000008380)={&(0x7f0000008040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000008340)={&(0x7f0000008200)={0x10c, r11, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8002}, 0x4085) 00:10:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x35]}}}}], [{@dont_measure='dont_measure'}, {@fsmagic={'fsmagic', 0x3d, 0x7ce3}}]}) [ 653.101512][ T3531] tmpfs: Bad value for 'mpol' [ 653.238843][ T3531] tmpfs: Bad value for 'mpol' [ 654.966348][ T3514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 655.021426][ T3514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 661.289805][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 661.337390][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 661.450898][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 661.469642][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.569214][ T3229] device veth0_vlan entered promiscuous mode [ 661.996730][ T3229] device veth1_vlan entered promiscuous mode [ 662.899831][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 662.949828][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 663.112312][ T3229] device veth0_macvtap entered promiscuous mode [ 663.279983][ T3229] device veth1_macvtap entered promiscuous mode [ 663.376320][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 663.399887][ T3343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 664.119626][ T3514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 664.192062][ T3514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 664.549282][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.610137][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.836064][ T3229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.837865][ T3229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.839616][ T3229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.844875][ T3229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.627006][ T3541] Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000020000080 [ 668.630164][ T3541] Oops [#1] [ 668.631065][ T3541] Modules linked in: [ 668.633534][ T3541] CPU: 1 PID: 3541 Comm: syz-executor.1 Not tainted 5.12.0-rc2-syzkaller-00474-ga5406a7ff56e #0 [ 668.635067][ T3541] Hardware name: riscv-virtio,qemu (DT) [ 668.636096][ T3541] epc : sock_ioctl+0x4c4/0x66c [ 668.637632][ T3541] ra : sock_ioctl+0x4c4/0x66c [ 668.639158][ T3541] epc : ffffffe0020e2068 ra : ffffffe0020e2068 sp : ffffffe0099f7da0 [ 668.640472][ T3541] gp : ffffffe004588910 tp : ffffffe007750000 t0 : 0000000000000000 [ 668.641858][ T3541] t1 : 0000000000000001 t2 : 000000001dcd6500 s0 : ffffffe0099f7e30 [ 668.643157][ T3541] s1 : 0000000000040000 a0 : 0000000000000000 a1 : 0000000000000007 [ 668.645019][ T3541] a2 : 1ffffffc00eea000 a3 : ffffffe002a8f8e6 a4 : 0000000000000000 [ 668.647438][ T3541] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000084ac8 [ 668.648694][ T3541] s2 : 0000000000000000 s3 : 0000000000008902 s4 : 0000000020000080 [ 668.649850][ T3541] s5 : ffffffe00458c0d0 s6 : ffffffe00d32cfc0 s7 : ffffffe009881c80 [ 668.651687][ T3541] s8 : 0000000000008903 s9 : ffffffe00d32d080 s10: 0000000000000000 [ 668.653853][ T3541] s11: 0000000000020000 t3 : f952249178ce9c00 t4 : ffffffc40133e77a [ 668.655481][ T3541] t5 : ffffffc40133e782 t6 : 0000000000040000 [ 668.656409][ T3541] status: 0000000000000120 badaddr: 0000000020000080 cause: 000000000000000f [ 668.657521][ T3541] Call Trace: [ 668.658148][ T3541] [] sock_ioctl+0x4c4/0x66c [ 668.659306][ T3541] [] sys_ioctl+0x5c2/0xd56 [ 668.660156][ T3541] [] ret_from_syscall+0x0/0x2 [ 668.662602][ T3541] ---[ end trace 61b2d6ee54354a79 ]--- [ 668.664786][ T3541] Kernel panic - not syncing: Fatal exception [ 668.665852][ T3541] SMP: stopping secondary CPUs [ 668.667558][ T3541] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:33:41 Registers: info registers vcpu 0 pc ffffffe000126858 mhartid 0000000000000000 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe000005760 sepc ffffffe000005764 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe000126854 x2/sp ffffffe004203c40 x3/gp ffffffe004588910 x4/tp ffffffe004239640 x5/t0 0000000000046000 x6/t1 ffffffc40cfaaba1 x7/t2 00000000000f4240 x8/s0 ffffffe004203cb0 x9/s1 0000000000000120 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 0000000000010001 x13/a3 ffffffe000126854 x14/a4 ffffffe004239640 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffe067d55d0b x18/s2 0000000400000000 x19/s3 ffffffe0050495a8 x20/s4 ffffffe00432e3c0 x21/s5 ffffffe0050495a8 x22/s6 ffffffe00013d332 x23/s7 ffffffe00432e3c8 x24/s8 0000000000000001 x25/s9 ffffffe004203db0 x26/s10 0000000000000000 x27/s11 0000000000000000 x28/t3 000000000000042d x29/t4 ffffffc40cfaaba1 x30/t5 ffffffc40cfaaba2 x31/t6 0000000000000003 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe000025d6e mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe002a5e454 sepc ffffffe0020e2068 mcause 8000000000000007 scause 000000000000000f mtval 0000000000000000 stval 0000000020000080 x0/zero 0000000000000000 x1/ra ffffffe000a58c22 x2/sp ffffffe0099f7b00 x3/gp ffffffe004588910 x4/tp ffffffe007750000 x5/t0 ffffffe004ffdbb7 x6/t1 ffffffc40133ef08 x7/t2 0000000000000000 x8/s0 ffffffe0099f7b50 x9/s1 ffffffe0037e6420 x10/a0 ffffffe007750540 x11/a1 0000000000000003 x12/a2 1ffffffc00eea0a8 x13/a3 ffffffe000a58c16 x14/a4 0000000000000000 x15/a5 ffffffe007750540 x16/a6 0000000000f00000 x17/a7 ffffffe0099f7847 x18/s2 ffffffe007750000 x19/s3 000000000000000f x20/s4 0000000000000001 x21/s5 0000000000000dd5 x22/s6 ffffffe007750000 x23/s7 ffffffe0099f7d80 x24/s8 0000000000000214 x25/s9 0000000fffffffff x26/s10 0000000000000000 x27/s11 0000000000020000 x28/t3 000000000000004d x29/t4 ffffffc40133ef07 x30/t5 ffffffc40133ef09 x31/t6 ffffffe0099f7848 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000