[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.48' (ECDSA) to the list of known hosts. 2020/12/12 22:11:51 fuzzer started 2020/12/12 22:11:52 dialing manager at 10.128.0.26:35307 2020/12/12 22:11:52 syscalls: 1619 2020/12/12 22:11:52 code coverage: enabled 2020/12/12 22:11:52 comparison tracing: ioctl(KCOV_DISABLE) failed: invalid argument 2020/12/12 22:11:52 extra coverage: enabled 2020/12/12 22:11:52 setuid sandbox: enabled 2020/12/12 22:11:52 namespace sandbox: enabled 2020/12/12 22:11:52 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/12 22:11:52 fault injection: enabled 2020/12/12 22:11:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/12 22:11:52 net packet injection: enabled 2020/12/12 22:11:52 net device setup: enabled 2020/12/12 22:11:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/12 22:11:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/12 22:11:52 USB emulation: enabled 2020/12/12 22:11:52 hci packet injection: enabled 2020/12/12 22:11:52 wifi device emulation: enabled 22:13:28 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/250, 0xfa}], 0x1, 0x0, 0x0) 22:13:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b37200000b000100666c6f7765720000540002002f0054803c0002800800010000010000080001004c0300000800010000000000080001000000000008000100ff0100000800010009"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:13:28 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)) 22:13:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 22:13:29 executing program 5: syz_emit_ethernet(0xa9, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xa0}]}}, {0x11, 0x0, 0x0, @multicast2, "7d0cb05b5d11070f649285465fe15ecb7fc1c7dd8cf0ce39bda0c629e2bc943624aaf3d7684e8ed448625ed489fc94204d4ec77bfc8717f9214433d4c17a4665c6ba853d229d8a90537acf674dbbb97be284f9a6a080f607fe638eabb0b34454d4b2e32cbf0fa08ba3718fea300a64db7dfdaf640ef9d96b9d7891"}}}}}, 0x0) syzkaller login: [ 162.258142][ T8492] IPVS: ftp: loaded support on port[0] = 21 [ 162.398839][ T8494] IPVS: ftp: loaded support on port[0] = 21 [ 162.509419][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 162.647281][ T8496] IPVS: ftp: loaded support on port[0] = 21 [ 162.707209][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.723324][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.733536][ T8492] device bridge_slave_0 entered promiscuous mode [ 162.744263][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.753725][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.764028][ T8492] device bridge_slave_1 entered promiscuous mode [ 162.895481][ T8498] IPVS: ftp: loaded support on port[0] = 21 [ 162.914170][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.923710][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 162.953809][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.985391][ T8492] team0: Port device team_slave_0 added [ 163.016060][ T8492] team0: Port device team_slave_1 added [ 163.086682][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.117311][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.144190][ T8492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.166960][ T8500] IPVS: ftp: loaded support on port[0] = 21 [ 163.197119][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.209345][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.238386][ T8492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.267009][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.275507][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.285263][ T8494] device bridge_slave_0 entered promiscuous mode [ 163.294293][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.306248][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.320426][ T8494] device bridge_slave_1 entered promiscuous mode [ 163.356422][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.385698][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.439956][ T8513] IPVS: ftp: loaded support on port[0] = 21 [ 163.477471][ T8492] device hsr_slave_0 entered promiscuous mode [ 163.488333][ T8492] device hsr_slave_1 entered promiscuous mode [ 163.520262][ T8494] team0: Port device team_slave_0 added [ 163.569733][ T8494] team0: Port device team_slave_1 added [ 163.628206][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.635915][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.662362][ T8494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.725067][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.733800][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.763048][ T8494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.908384][ T8494] device hsr_slave_0 entered promiscuous mode [ 163.915407][ T8494] device hsr_slave_1 entered promiscuous mode [ 163.923367][ T8494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.932224][ T8494] Cannot create hsr debugfs directory [ 163.937865][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 164.032062][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 164.148420][ T8500] chnl_net:caif_netlink_parms(): no params data found [ 164.161720][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 164.331262][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.338372][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.347020][ T8496] device bridge_slave_0 entered promiscuous mode [ 164.395946][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 164.410428][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.419836][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.428318][ T8496] device bridge_slave_1 entered promiscuous mode [ 164.470411][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 164.543571][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.550743][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.559121][ T8498] device bridge_slave_0 entered promiscuous mode [ 164.568934][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.581588][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.616005][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.624749][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.632230][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 164.634802][ T8498] device bridge_slave_1 entered promiscuous mode [ 164.658242][ T8492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.722193][ T8492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.744104][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.751478][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.759533][ T8500] device bridge_slave_0 entered promiscuous mode [ 164.770240][ T8496] team0: Port device team_slave_0 added [ 164.808024][ T8492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.819501][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.827049][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.836252][ T8500] device bridge_slave_1 entered promiscuous mode [ 164.845218][ T8496] team0: Port device team_slave_1 added [ 164.854052][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.875403][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 164.882095][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.889173][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.900420][ T8513] device bridge_slave_0 entered promiscuous mode [ 164.909450][ T8492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.942126][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.955740][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.963588][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.972413][ T8513] device bridge_slave_1 entered promiscuous mode [ 165.010714][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.035573][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.043082][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.070795][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.093611][ T8500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.105433][ T8500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.118181][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.127626][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 165.142340][ T8494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.158838][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.165960][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.193624][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.231809][ T8498] team0: Port device team_slave_0 added [ 165.240787][ T8500] team0: Port device team_slave_0 added [ 165.247747][ T8494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.268793][ T8494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.294113][ T8498] team0: Port device team_slave_1 added [ 165.304370][ T8513] team0: Port device team_slave_0 added [ 165.311910][ T8500] team0: Port device team_slave_1 added [ 165.319456][ T8513] team0: Port device team_slave_1 added [ 165.338936][ T8494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.360969][ T3157] Bluetooth: hci5: command 0x0409 tx timeout [ 165.410555][ T8496] device hsr_slave_0 entered promiscuous mode [ 165.418554][ T8496] device hsr_slave_1 entered promiscuous mode [ 165.427571][ T8496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.435458][ T8496] Cannot create hsr debugfs directory [ 165.456623][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.464891][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.495239][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.507509][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.515034][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.541570][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.567026][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.574659][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.603041][ T8500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.618521][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.626740][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.654193][ T8500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.666918][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.675579][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.703419][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.718627][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.728433][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.760321][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.805014][ T8513] device hsr_slave_0 entered promiscuous mode [ 165.812301][ T8513] device hsr_slave_1 entered promiscuous mode [ 165.818775][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.826850][ T8513] Cannot create hsr debugfs directory [ 165.914156][ T8500] device hsr_slave_0 entered promiscuous mode [ 165.923897][ T8500] device hsr_slave_1 entered promiscuous mode [ 165.930387][ T8500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.938409][ T8500] Cannot create hsr debugfs directory [ 165.980332][ T8498] device hsr_slave_0 entered promiscuous mode [ 165.987595][ T8498] device hsr_slave_1 entered promiscuous mode [ 165.995105][ T8498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.003170][ T8498] Cannot create hsr debugfs directory [ 166.231329][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 166.337333][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.385350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.396637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.408203][ T8496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.432121][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.448783][ T8492] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.466704][ T8496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.476096][ T8496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.491023][ T3157] Bluetooth: hci1: command 0x041b tx timeout [ 166.503729][ T8496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.520000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.529486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.539030][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.546363][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.571400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.602580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.612866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.622491][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.629541][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.638217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.674851][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.685983][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.694104][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.707225][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.717593][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.730967][ T8494] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.738039][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 166.746318][ T8500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.774157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.782258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.790743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.826814][ T8500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.838663][ T8500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.857776][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.869572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.879079][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.886237][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.894412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.903179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.912177][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.919241][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.927629][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.936766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.945610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.951253][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 166.955016][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.978600][ T8492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.994908][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.003546][ T8500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.034344][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.046718][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.056016][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.068864][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.078081][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.087366][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.096970][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.106371][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.116943][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.136571][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.177287][ T8494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.192316][ T3191] Bluetooth: hci4: command 0x041b tx timeout [ 167.198757][ T8494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.223106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.235167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.258671][ T8513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.280981][ T8513] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.295794][ T8513] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.312516][ T8513] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.386024][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.393829][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.401997][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.410519][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.422337][ T8492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.431414][ T3157] Bluetooth: hci5: command 0x041b tx timeout [ 167.460045][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.479198][ T8498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.493217][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.522850][ T8498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.541868][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.550537][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.585802][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.596536][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.604899][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.615091][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.624957][ T8498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.642552][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.667214][ T8498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.722287][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.732474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.740893][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.748040][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.757234][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.766543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.775200][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.782357][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.812567][ T8492] device veth0_vlan entered promiscuous mode [ 167.825742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.834458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.844053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.852595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.861056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.869982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.880039][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.888616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.897583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.906536][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.924046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.935764][ T8494] device veth0_vlan entered promiscuous mode [ 167.978148][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.990005][ T8494] device veth1_vlan entered promiscuous mode [ 168.025322][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.034156][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.046524][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.058310][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.069844][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.085295][ T8492] device veth1_vlan entered promiscuous mode [ 168.131891][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.140409][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.151097][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.159976][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.169403][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.182905][ T8500] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.189820][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.198931][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.210761][ T8496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.229572][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.274472][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.283167][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.290988][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.301377][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.309869][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.317015][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.325766][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.335007][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.343980][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.351031][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.359986][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.377922][ T8494] device veth0_macvtap entered promiscuous mode [ 168.384858][ T9780] Bluetooth: hci0: command 0x040f tx timeout [ 168.423344][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.434227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.444135][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.455051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.464087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.473657][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.480745][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.501627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.510538][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.542464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.552648][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 168.574182][ T8494] device veth1_macvtap entered promiscuous mode [ 168.591146][ T8492] device veth0_macvtap entered promiscuous mode [ 168.612516][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.620752][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.632012][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.639936][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.649225][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.657435][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.666048][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.675368][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.684297][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.693792][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.728478][ T8492] device veth1_macvtap entered promiscuous mode [ 168.737357][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.748683][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.757318][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.767051][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.775747][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.784909][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.791824][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 168.794397][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.806394][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.820469][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.835223][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.856292][ T8500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.870808][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.884993][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.910865][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.919454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.929746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.938416][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.947591][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.957817][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.966931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.975960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.985124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.008579][ T8494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.018203][ T8494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.027746][ T8494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.037210][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 169.043896][ T8494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.064137][ T8492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.074943][ T8492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.088074][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.098163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.107926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.120383][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.128627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.136785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.145964][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.156645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.176875][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.187698][ T8492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.202381][ T8492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.214622][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.235866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.244896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.254998][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.264553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.275210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.284448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.294027][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.303062][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.311964][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 169.348341][ T8492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.360697][ T8492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.369745][ T8492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.378734][ T8492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.398566][ T8513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.412080][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.420893][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.430972][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.438149][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.452089][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.460706][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.470335][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.477467][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.485781][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.494947][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.514041][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 169.533143][ T8500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.580220][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.598092][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.609336][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.620466][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.630542][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.639808][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.647667][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.716603][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.732262][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.740604][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.754860][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.763533][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.770978][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.781400][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.829908][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.872553][ T8496] device veth0_vlan entered promiscuous mode [ 169.910667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.926124][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.968621][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.985957][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.038782][ T8496] device veth1_vlan entered promiscuous mode [ 170.070066][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.096257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.109719][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.126258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.138599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.150284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.165346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.174268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.184001][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.290672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.298523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.316912][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.325783][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.368496][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.393949][ T9780] Bluetooth: hci0: command 0x0419 tx timeout [ 170.423093][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.465131][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.485578][ T8496] device veth0_macvtap entered promiscuous mode [ 170.500914][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.515102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.525561][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.535703][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.544992][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.554511][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.565474][ T8500] device veth0_vlan entered promiscuous mode [ 170.577912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.587149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.596232][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.617973][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.628525][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.643845][ T17] Bluetooth: hci1: command 0x0419 tx timeout [ 170.645454][ T8496] device veth1_macvtap entered promiscuous mode [ 170.661087][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.670986][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.682962][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.691774][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.719700][ T8513] device veth0_vlan entered promiscuous mode [ 170.764595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.790270][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.811242][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.825274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.849054][ T8500] device veth1_vlan entered promiscuous mode 22:13:38 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/250, 0xfa}], 0x1, 0x0, 0x0) [ 170.864134][ T9855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.873765][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 170.887399][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.906861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 22:13:38 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/250, 0xfa}], 0x1, 0x0, 0x0) [ 170.934245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.961840][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.985032][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.014952][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.054571][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.088768][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.113959][ T3191] Bluetooth: hci3: command 0x0419 tx timeout [ 171.135463][ T9855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.158580][ T9855] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.196807][ T8513] device veth1_vlan entered promiscuous mode [ 171.220962][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.239533][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.251154][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.285272][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 22:13:38 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/250, 0xfa}], 0x1, 0x0, 0x0) [ 171.298992][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.309560][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.320867][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.333076][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.352155][ T3191] Bluetooth: hci4: command 0x0419 tx timeout [ 171.353055][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.402524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.423154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.452442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.470679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.491210][ T8496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.510796][ T8496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.524021][ T8496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.537010][ T8496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.558808][ T8498] device veth0_vlan entered promiscuous mode [ 171.591389][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.610404][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.621191][ T9773] Bluetooth: hci5: command 0x0419 tx timeout 22:13:38 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x6, 0x4, 0x2009, 0x4}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x20) [ 171.637019][ T8498] device veth1_vlan entered promiscuous mode 22:13:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="26eef0b4754bbeca608fb7709ccbe8", 0xf) 22:13:38 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x3, 0x0, 0x10) [ 171.730087][ T8500] device veth0_macvtap entered promiscuous mode [ 171.769546][ T8513] device veth0_macvtap entered promiscuous mode [ 171.816464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.836911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.857786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 22:13:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1b, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) [ 171.879604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.895882][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.906523][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 22:13:39 executing program 0: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) [ 171.935964][ T8500] device veth1_macvtap entered promiscuous mode [ 171.969878][ T8513] device veth1_macvtap entered promiscuous mode [ 172.003408][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.013737][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.024020][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.034396][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.146223][ T8498] device veth0_macvtap entered promiscuous mode [ 172.178962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.193115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.233613][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.254266][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.279291][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.300124][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.321603][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.335503][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.355562][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.364797][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.387997][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.412254][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.430589][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.450802][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.470244][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.493137][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.527020][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.539598][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.556918][ T8498] device veth1_macvtap entered promiscuous mode [ 172.567588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.578003][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.589442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.605118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.616146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.625304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.642054][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.650059][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.673414][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.694549][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.708800][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.720981][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.730963][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.741589][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.752972][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.765961][ T8500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.776263][ T8500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.786945][ T8500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.798496][ T8500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.810865][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.822958][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.835853][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.846400][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.856365][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.866860][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.880000][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.890515][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.903012][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.913209][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.921148][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.932881][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.941492][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.951304][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.994158][ T8513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.004601][ T8513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.013405][ T8513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.022224][ T8513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.035654][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.047246][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.058472][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.069610][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.079554][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.090135][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.101837][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.113643][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.123719][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.134230][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.145511][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.168953][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.173072][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.185822][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.189808][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.218748][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.229836][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.241476][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.254229][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.264139][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.276382][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.286637][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.297261][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.307827][ T8498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.318610][ T8498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.329730][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.367938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.383086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.393402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.416938][ T8498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.416993][ T8498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.417017][ T8498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.417040][ T8498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.541350][ T9906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.554449][ T9906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.588358][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.716166][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.739619][ T33] audit: type=1804 audit(1607811220.904:2): pid=9937 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir076476526/syzkaller.o7Nzfs/0/memory.events" dev="sda1" ino=15754 res=1 errno=0 [ 173.776022][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.794275][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.802816][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.816187][ T33] audit: type=1800 audit(1607811220.934:3): pid=9937 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=15754 res=0 errno=0 [ 173.824616][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.855322][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.865201][ T33] audit: type=1804 audit(1607811220.934:4): pid=9937 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir076476526/syzkaller.o7Nzfs/0/memory.events" dev="sda1" ino=15754 res=1 errno=0 [ 173.969563][ T33] audit: type=1804 audit(1607811221.134:5): pid=9960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir076476526/syzkaller.o7Nzfs/0/memory.events" dev="sda1" ino=15754 res=1 errno=0 [ 174.018171][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.084636][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.133029][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.141035][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.175555][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.210930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.237195][ T9906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.296040][ T9906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.357974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:13:41 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)) 22:13:41 executing program 0: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) 22:13:41 executing program 1: unshare(0x2a000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x48000000}, @exit], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x63) 22:13:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 22:13:41 executing program 5: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) [ 174.745771][ T33] audit: type=1804 audit(1607811221.914:6): pid=9992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir076476526/syzkaller.o7Nzfs/1/memory.events" dev="sda1" ino=15779 res=1 errno=0 22:13:42 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)) 22:13:42 executing program 0: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) 22:13:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 174.929617][ T33] audit: type=1800 audit(1607811221.914:7): pid=9992 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=15779 res=0 errno=0 22:13:42 executing program 5: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) [ 174.964211][ T33] audit: type=1804 audit(1607811221.924:8): pid=9992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir076476526/syzkaller.o7Nzfs/1/memory.events" dev="sda1" ino=15779 res=1 errno=0 [ 174.994914][ T33] audit: type=1804 audit(1607811222.064:9): pid=10000 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir076476526/syzkaller.o7Nzfs/1/memory.events" dev="sda1" ino=15779 res=1 errno=0 [ 175.109158][ T33] audit: type=1804 audit(1607811222.274:10): pid=10002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir278306097/syzkaller.GIMngd/5/memory.events" dev="sda1" ino=15778 res=1 errno=0 22:13:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)) 22:13:42 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:42 executing program 0: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) [ 175.297998][ T33] audit: type=1800 audit(1607811222.274:11): pid=10002 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15778 res=0 errno=0 22:13:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 22:13:42 executing program 5: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) 22:13:42 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:42 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:42 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:42 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:42 executing program 5: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) 22:13:43 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:43 executing program 5: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) 22:13:43 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:43 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:43 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:43 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:43 executing program 5: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000001c0)="8e", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) close(r0) 22:13:44 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb4}, 0x20105) 22:13:44 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:44 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000000000004000000000000000001000004000000000000000002"], &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x1}, 0x20) 22:13:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) 22:13:44 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4c800) ioctl$EXT4_IOC_MIGRATE(r2, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 22:13:44 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000000000004000000000000000001000004000000000000000002"], &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x1}, 0x20) 22:13:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) 22:13:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 22:13:44 executing program 4: select(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x2}, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x4}, &(0x7f0000000100)={0x0, 0x2710}) 22:13:44 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000000000004000000000000000001000004000000000000000002"], &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x1}, 0x20) 22:13:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000680)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000680)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0xfffffe00}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x8, 0x20}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r4, 0x0, 0x9c, "5f7384f90a252f075dce194d7879e7c3cbb7841e5321ee77b44abc1b9ce82b0e442341ed82069b742cd585a386fa4dc38aa8a91e65ebf95fbee1f92953833e60a607da3d196f7ad7344e99354465f827c32c2d768cc1b8ca3e97440acd60d6f43953d30fd8f31a81491af7f9c61977d45862b81e8e70d8b0689d9543e51a3445c24b1fd6ad17fd1a2a020cc582744fbe7337e9a652dd841c381975d7"}, 0xa4) recvfrom$llc(r3, &(0x7f0000000000), 0x0, 0x2100, &(0x7f0000000040)={0x1a, 0x11a, 0x4, 0x7, 0x3f, 0xe8, @local}, 0x10) unshare(0x4c020000) 22:13:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) [ 177.907384][T10105] IPVS: ftp: loaded support on port[0] = 21 22:13:45 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xca, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 22:13:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000840)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="4b503ca95712a17f4a8976c277ac307cff1fec01", 0x14, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 22:13:45 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000000000004000000000000000001000004000000000000000002"], &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x1}, 0x20) [ 178.128583][T10135] IPVS: ftp: loaded support on port[0] = 21 22:13:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) 22:13:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) 22:13:45 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000000000000000000000000000d3fb1e5300010014000100080001000000006a35f5e11a633e7a185787bf2afc52c100082f0262470000012bc10200010001"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:13:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "eb62237a1d5d5134c6269f621550d70446bb53fa7700000000e32bbf739700", "684e4b2eb736de524823738180a1c807000000000000004a11e841668e3aa5ef", "c353fed62af89de57a6413a6978255d074ab8171856ea7b74275d4e2ef780425", "9964916e92ba4eeba947b41a255ede1ebad3041ac57eee62c9782ada4017080e", "6f601ab8e33cd62d102de3b285f76300", "a78ac97b364221e25a5bc0c6"}}) 22:13:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x464, 0x431}, 0x10}}, 0x0) 22:13:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000001c0)=0x1e) 22:13:45 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000000000000000000000000000d3fb1e5300010014000100080001000000006a35f5e11a633e7a185787bf2afc52c100082f0262470000012bc10200010001"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:13:48 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x9, 0x9, 0x8, 0x10, @remote, @private2, 0x20, 0x8000, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x0, 0x3f, 0x8, 0x200, 0x32, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x80, 0x1, 0xba0, 0x5}}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000b000000000d01d319be5bac0d"], 0x10}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x19}, @CTA_ZONE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x480f4}, 0x4) 22:13:48 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) 22:13:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}]}, 0x24}}, 0x0) 22:13:48 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 22:13:48 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000000000000000000000000000d3fb1e5300010014000100080001000000006a35f5e11a633e7a185787bf2afc52c100082f0262470000012bc10200010001"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:13:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) 22:13:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}]}, 0x24}}, 0x0) 22:13:48 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000000000000000000000000000d3fb1e5300010014000100080001000000006a35f5e11a633e7a185787bf2afc52c100082f0262470000012bc10200010001"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:13:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x3, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x40) 22:13:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x19c, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 22:13:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}]}, 0x24}}, 0x0) 22:13:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 22:13:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x9, 0x9, 0x8, 0x10, @remote, @private2, 0x20, 0x8000, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x0, 0x3f, 0x8, 0x200, 0x32, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x80, 0x1, 0xba0, 0x5}}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000b000000000d01d319be5bac0d"], 0x10}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x19}, @CTA_ZONE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x480f4}, 0x4) 22:13:49 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63cca555fedbe9d8f3b423cdacfa7e32fe15b0e1d23073f636de77a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0e3ccae669e173a649c1cf96587d452d64e7cc957d77578f4c3e8efbc6f2b2a3e3173d5661cfeec79c6ffffffff83ba58d31a20a225126c3b03e3b00fab5e810b855b7a639e6d62dabe00000000000000000000f085156250e44cb77f1fa06300000000000000000000000e10fef33bd02bcad8077d2631185fcadfaaa2125fea2c43d0bafa26925796d1faab8d723fca40018cbf10646bc3738932df88e5df74888d25ee1e1944007ed6f4e92c56137b3a0a20f372036d7290d594848741ee8ee14b56706c40c1cbe3fc6ffa0b6712cf77693ababc46b956ff90697c0aa54e85aebe890a05f69d195b0f31fa03000000b3ea8030a4156d9f97f5a3bfec4f282e0818670929bc46356389f17f38c4bef993ae484f32d1a6056c411ed88501ab6310e0e159ffa49fdd7e07933ac855200ca4c88d1bbb675973d362aff45108e1eab2141a5b4c79ec921f7b08198a614f37b89949422b3eeb9b95fef47ec4057ee5c9aa0bd7b6713faffce6bfd5fec5a4eabbdd1ebbd08ebf7201582e9882c716e4cddd0fe21116a8b48d443b2f5c71299e37fd0d6d0d0d7936c777b15659c889b42fe4bc2d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) 22:13:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0xaa4, 0x4) 22:13:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}]}, 0x24}}, 0x0) [ 181.908893][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:13:49 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x9, 0x9, 0x8, 0x10, @remote, @private2, 0x20, 0x8000, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x0, 0x3f, 0x8, 0x200, 0x32, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x80, 0x1, 0xba0, 0x5}}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000b000000000d01d319be5bac0d"], 0x10}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x19}, @CTA_ZONE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x480f4}, 0x4) 22:13:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) 22:13:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 22:13:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xd, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 22:13:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x9, 0x9, 0x8, 0x10, @remote, @private2, 0x20, 0x8000, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x0, 0x3f, 0x8, 0x200, 0x32, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x80, 0x1, 0xba0, 0x5}}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000b000000000d01d319be5bac0d"], 0x10}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x19}, @CTA_ZONE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x480f4}, 0x4) 22:13:49 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:13:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x9, 0x9, 0x8, 0x10, @remote, @private2, 0x20, 0x8000, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x0, 0x3f, 0x8, 0x200, 0x32, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x80, 0x1, 0xba0, 0x5}}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000b000000000d01d319be5bac0d"], 0x10}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x19}, @CTA_ZONE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x480f4}, 0x4) 22:13:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 22:13:49 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:13:49 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) 22:13:50 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:13:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 22:13:50 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x9, 0x9, 0x8, 0x10, @remote, @private2, 0x20, 0x8000, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x0, 0x3f, 0x8, 0x200, 0x32, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x80, 0x1, 0xba0, 0x5}}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000b000000000d01d319be5bac0d"], 0x10}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x19}, @CTA_ZONE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x480f4}, 0x4) 22:13:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 22:13:50 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:13:50 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) 22:13:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 22:13:50 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x9, 0x9, 0x8, 0x10, @remote, @private2, 0x20, 0x8000, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x0, 0x3f, 0x8, 0x200, 0x32, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x80, 0x1, 0xba0, 0x5}}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000b000000000d01d319be5bac0d"], 0x10}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x19}, @CTA_ZONE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x480f4}, 0x4) 22:13:50 executing program 2: socketpair(0x18, 0x0, 0x5, &(0x7f0000000280)) 22:13:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f00009db000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000b02000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xffffffffeffffff7, 0x8032, 0xffffffffffffffff, 0x0) 22:13:50 executing program 2: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x217e}, {0x8, 0x15, 0x2c9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51e8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$nbd(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@nl=@unspec, {&(0x7f00000008c0)=""/136, 0x88}, &(0x7f0000000980), 0x4}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x800, 0x70bd28, 0x8001, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x200040c1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "28844aef7d47c6de8630f95d051701605af353d2d2ed61466aac0355762ab88efd656ded02cd938150b01e632d47e02db35485bbba95b1e7ed33b8b32229a01ebd3bdb3ccaf6c3cdcfe30d5598a443dfeda8d4e7b712bc37ae25478ccf4c8bd3d0c5a16d82aae9c23a2e2a5e35d141fd800d198cc79f46526aeebfedac8e9ebc81c4db7a2d1d39329644e50e86365b2158cbc8c7375d239d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d0}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "7be1e40121d5153621f3218d4a2a03ab9e490cdef01207a10c526bc0e4e39681c873d90a513b917df2ed8315ea01248accde7c2bfbf90cb348dc7d116d3b3bcfbfe7245143babcbf0a2a9876aa5639a050c62080ed536c5eb2cbcc7c1acdcd041745ce049fc0ec654e57c2d6d2d7f54297b5d80e6734c52948c4eee1164667c9d5140c981a15ab13face7251ca0e0fc37ecfe39708a157"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c93}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x2, 0x0) 22:13:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 22:13:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 22:13:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f00009db000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000b02000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xffffffffeffffff7, 0x8032, 0xffffffffffffffff, 0x0) 22:13:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 22:13:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 183.934067][T10344] IPVS: ftp: loaded support on port[0] = 21 22:13:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f00009db000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000b02000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xffffffffeffffff7, 0x8032, 0xffffffffffffffff, 0x0) 22:13:51 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) [ 184.290713][T10344] IPVS: ftp: loaded support on port[0] = 21 22:13:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 22:13:51 executing program 2: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x217e}, {0x8, 0x15, 0x2c9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51e8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$nbd(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@nl=@unspec, {&(0x7f00000008c0)=""/136, 0x88}, &(0x7f0000000980), 0x4}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x800, 0x70bd28, 0x8001, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x200040c1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "28844aef7d47c6de8630f95d051701605af353d2d2ed61466aac0355762ab88efd656ded02cd938150b01e632d47e02db35485bbba95b1e7ed33b8b32229a01ebd3bdb3ccaf6c3cdcfe30d5598a443dfeda8d4e7b712bc37ae25478ccf4c8bd3d0c5a16d82aae9c23a2e2a5e35d141fd800d198cc79f46526aeebfedac8e9ebc81c4db7a2d1d39329644e50e86365b2158cbc8c7375d239d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d0}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "7be1e40121d5153621f3218d4a2a03ab9e490cdef01207a10c526bc0e4e39681c873d90a513b917df2ed8315ea01248accde7c2bfbf90cb348dc7d116d3b3bcfbfe7245143babcbf0a2a9876aa5639a050c62080ed536c5eb2cbcc7c1acdcd041745ce049fc0ec654e57c2d6d2d7f54297b5d80e6734c52948c4eee1164667c9d5140c981a15ab13face7251ca0e0fc37ecfe39708a157"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c93}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x2, 0x0) 22:13:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f00009db000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000b02000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xffffffffeffffff7, 0x8032, 0xffffffffffffffff, 0x0) 22:13:51 executing program 3: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x217e}, {0x8, 0x15, 0x2c9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51e8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$nbd(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@nl=@unspec, {&(0x7f00000008c0)=""/136, 0x88}, &(0x7f0000000980), 0x4}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x800, 0x70bd28, 0x8001, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x200040c1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "28844aef7d47c6de8630f95d051701605af353d2d2ed61466aac0355762ab88efd656ded02cd938150b01e632d47e02db35485bbba95b1e7ed33b8b32229a01ebd3bdb3ccaf6c3cdcfe30d5598a443dfeda8d4e7b712bc37ae25478ccf4c8bd3d0c5a16d82aae9c23a2e2a5e35d141fd800d198cc79f46526aeebfedac8e9ebc81c4db7a2d1d39329644e50e86365b2158cbc8c7375d239d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d0}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "7be1e40121d5153621f3218d4a2a03ab9e490cdef01207a10c526bc0e4e39681c873d90a513b917df2ed8315ea01248accde7c2bfbf90cb348dc7d116d3b3bcfbfe7245143babcbf0a2a9876aa5639a050c62080ed536c5eb2cbcc7c1acdcd041745ce049fc0ec654e57c2d6d2d7f54297b5d80e6734c52948c4eee1164667c9d5140c981a15ab13face7251ca0e0fc37ecfe39708a157"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c93}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x2, 0x0) 22:13:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 184.798523][T10408] IPVS: ftp: loaded support on port[0] = 21 22:13:52 executing program 1: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) [ 184.839022][T10411] IPVS: ftp: loaded support on port[0] = 21 22:13:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 22:13:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000002c0)="240000001e005f031400fffffffffff80700b3446c0d06c2e553797c080008ff67dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x800000000000024, 0xa, 0x0) 22:13:52 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x8) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 22:13:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x72, &(0x7f0000000080)={@dev}, 0xc) 22:13:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) 22:13:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 22:13:52 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x8) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 22:13:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="b405000000000000b77ca4000000000073013500000000009500000000000000f1dd3582a4f5b72a16768b3bd9d948e7ab9a7d2125889528ea2e854de432a51acfcb2d03108c309d95944a55718228ca0df25ba4a944e7b6bedc021d7c88e842cdb1ee97c3ca7cb5070b027ada2cbdfe167754fd78d74da318b8baa5c2e530ee51951b6028fb745b1db82bb5613616f435f3f379f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 22:13:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x63, 0xa, 0xa, 0xff00, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:13:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000001c0)=0x7, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/150, 0x96}], 0x6}, 0xffff}, {{&(0x7f0000000740)=@ll, 0x80, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f0000001980)=""/138, 0x8a}], 0x6}, 0x5a4c}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/183, 0xb7}], 0x3}, 0x7}], 0x3, 0x0, &(0x7f0000001f00)={r3, r4+60000000}) 22:13:52 executing program 3: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x217e}, {0x8, 0x15, 0x2c9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51e8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$nbd(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@nl=@unspec, {&(0x7f00000008c0)=""/136, 0x88}, &(0x7f0000000980), 0x4}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x800, 0x70bd28, 0x8001, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x200040c1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "28844aef7d47c6de8630f95d051701605af353d2d2ed61466aac0355762ab88efd656ded02cd938150b01e632d47e02db35485bbba95b1e7ed33b8b32229a01ebd3bdb3ccaf6c3cdcfe30d5598a443dfeda8d4e7b712bc37ae25478ccf4c8bd3d0c5a16d82aae9c23a2e2a5e35d141fd800d198cc79f46526aeebfedac8e9ebc81c4db7a2d1d39329644e50e86365b2158cbc8c7375d239d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d0}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "7be1e40121d5153621f3218d4a2a03ab9e490cdef01207a10c526bc0e4e39681c873d90a513b917df2ed8315ea01248accde7c2bfbf90cb348dc7d116d3b3bcfbfe7245143babcbf0a2a9876aa5639a050c62080ed536c5eb2cbcc7c1acdcd041745ce049fc0ec654e57c2d6d2d7f54297b5d80e6734c52948c4eee1164667c9d5140c981a15ab13face7251ca0e0fc37ecfe39708a157"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c93}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x2, 0x0) 22:13:52 executing program 2: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x217e}, {0x8, 0x15, 0x2c9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51e8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$nbd(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@nl=@unspec, {&(0x7f00000008c0)=""/136, 0x88}, &(0x7f0000000980), 0x4}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x800, 0x70bd28, 0x8001, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x200040c1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "28844aef7d47c6de8630f95d051701605af353d2d2ed61466aac0355762ab88efd656ded02cd938150b01e632d47e02db35485bbba95b1e7ed33b8b32229a01ebd3bdb3ccaf6c3cdcfe30d5598a443dfeda8d4e7b712bc37ae25478ccf4c8bd3d0c5a16d82aae9c23a2e2a5e35d141fd800d198cc79f46526aeebfedac8e9ebc81c4db7a2d1d39329644e50e86365b2158cbc8c7375d239d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d0}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "7be1e40121d5153621f3218d4a2a03ab9e490cdef01207a10c526bc0e4e39681c873d90a513b917df2ed8315ea01248accde7c2bfbf90cb348dc7d116d3b3bcfbfe7245143babcbf0a2a9876aa5639a050c62080ed536c5eb2cbcc7c1acdcd041745ce049fc0ec654e57c2d6d2d7f54297b5d80e6734c52948c4eee1164667c9d5140c981a15ab13face7251ca0e0fc37ecfe39708a157"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c93}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x2, 0x0) [ 185.658578][T10483] IPVS: ftp: loaded support on port[0] = 21 [ 185.705720][T10482] IPVS: ftp: loaded support on port[0] = 21 [ 185.726250][T10491] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 22:13:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff0000000200010000030005000000000002"], 0x60}}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:13:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) [ 186.699629][T10505] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 22:13:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff0000000200010000030005000000000002"], 0x60}}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:13:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000001c0)=0x7, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/150, 0x96}], 0x6}, 0xffff}, {{&(0x7f0000000740)=@ll, 0x80, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f0000001980)=""/138, 0x8a}], 0x6}, 0x5a4c}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/183, 0xb7}], 0x3}, 0x7}], 0x3, 0x0, &(0x7f0000001f00)={r3, r4+60000000}) 22:13:54 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x8) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) [ 186.981500][T10555] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 22:13:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff0000000200010000030005000000000002"], 0x60}}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:13:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000001c0)=0x7, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/150, 0x96}], 0x6}, 0xffff}, {{&(0x7f0000000740)=@ll, 0x80, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f0000001980)=""/138, 0x8a}], 0x6}, 0x5a4c}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/183, 0xb7}], 0x3}, 0x7}], 0x3, 0x0, &(0x7f0000001f00)={r3, r4+60000000}) 22:13:54 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x8) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 22:13:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000001c0)=0x7, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/150, 0x96}], 0x6}, 0xffff}, {{&(0x7f0000000740)=@ll, 0x80, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f0000001980)=""/138, 0x8a}], 0x6}, 0x5a4c}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/183, 0xb7}], 0x3}, 0x7}], 0x3, 0x0, &(0x7f0000001f00)={r3, r4+60000000}) [ 187.244081][T10602] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 22:13:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000001c0)=0x7, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/150, 0x96}], 0x6}, 0xffff}, {{&(0x7f0000000740)=@ll, 0x80, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f0000001980)=""/138, 0x8a}], 0x6}, 0x5a4c}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/183, 0xb7}], 0x3}, 0x7}], 0x3, 0x0, &(0x7f0000001f00)={r3, r4+60000000}) [ 187.404199][T10614] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 188.577885][T10619] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 22:13:57 executing program 3: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x217e}, {0x8, 0x15, 0x2c9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51e8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$nbd(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@nl=@unspec, {&(0x7f00000008c0)=""/136, 0x88}, &(0x7f0000000980), 0x4}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x800, 0x70bd28, 0x8001, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x200040c1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "28844aef7d47c6de8630f95d051701605af353d2d2ed61466aac0355762ab88efd656ded02cd938150b01e632d47e02db35485bbba95b1e7ed33b8b32229a01ebd3bdb3ccaf6c3cdcfe30d5598a443dfeda8d4e7b712bc37ae25478ccf4c8bd3d0c5a16d82aae9c23a2e2a5e35d141fd800d198cc79f46526aeebfedac8e9ebc81c4db7a2d1d39329644e50e86365b2158cbc8c7375d239d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d0}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "7be1e40121d5153621f3218d4a2a03ab9e490cdef01207a10c526bc0e4e39681c873d90a513b917df2ed8315ea01248accde7c2bfbf90cb348dc7d116d3b3bcfbfe7245143babcbf0a2a9876aa5639a050c62080ed536c5eb2cbcc7c1acdcd041745ce049fc0ec654e57c2d6d2d7f54297b5d80e6734c52948c4eee1164667c9d5140c981a15ab13face7251ca0e0fc37ecfe39708a157"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c93}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x2, 0x0) [ 190.759428][T10643] IPVS: ftp: loaded support on port[0] = 21 22:13:58 executing program 2: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x217e}, {0x8, 0x15, 0x2c9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51e8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$nbd(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000009c0)={@nl=@unspec, {&(0x7f00000008c0)=""/136, 0x88}, &(0x7f0000000980), 0x4}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x800, 0x70bd28, 0x8001, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x200040c1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "28844aef7d47c6de8630f95d051701605af353d2d2ed61466aac0355762ab88efd656ded02cd938150b01e632d47e02db35485bbba95b1e7ed33b8b32229a01ebd3bdb3ccaf6c3cdcfe30d5598a443dfeda8d4e7b712bc37ae25478ccf4c8bd3d0c5a16d82aae9c23a2e2a5e35d141fd800d198cc79f46526aeebfedac8e9ebc81c4db7a2d1d39329644e50e86365b2158cbc8c7375d239d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d0}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "7be1e40121d5153621f3218d4a2a03ab9e490cdef01207a10c526bc0e4e39681c873d90a513b917df2ed8315ea01248accde7c2bfbf90cb348dc7d116d3b3bcfbfe7245143babcbf0a2a9876aa5639a050c62080ed536c5eb2cbcc7c1acdcd041745ce049fc0ec654e57c2d6d2d7f54297b5d80e6734c52948c4eee1164667c9d5140c981a15ab13face7251ca0e0fc37ecfe39708a157"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c93}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x2, 0x0) 22:13:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff0000000200010000030005000000000002"], 0x60}}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:13:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609", 0x4) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="d3dd14ebce7f6dca48880edacbc43606000000000000006294d1a57b3ad4bc0e50052d80b0c3badd174bfaec43df7d3939a4e183e1e5f71d19533a3dbceb7da971843126cef3119f", 0x48}], 0x1, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/174, 0xae}], 0x1}, 0x2042) 22:13:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000001c0)=0x7, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/150, 0x96}], 0x6}, 0xffff}, {{&(0x7f0000000740)=@ll, 0x80, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f0000001980)=""/138, 0x8a}], 0x6}, 0x5a4c}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/183, 0xb7}], 0x3}, 0x7}], 0x3, 0x0, &(0x7f0000001f00)={r3, r4+60000000}) 22:13:58 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0xfdef) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000003400), 0x0, 0x0, 0x10}}], 0x5d0, 0x10000, 0x0) 22:13:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) [ 191.657518][T10678] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 22:13:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3bad}]}}}]}, 0x38}}, 0x0) 22:13:58 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0xf) 22:13:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e0500000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ae340b7677a0e5bf5ff1b0816f3f6db1c000100000000000000495f0000001c00000006ad8e5e00000089da8d0f00"}, 0x80) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000001c0)=0x7, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/150, 0x96}], 0x6}, 0xffff}, {{&(0x7f0000000740)=@ll, 0x80, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/110, 0x6e}, {&(0x7f0000001980)=""/138, 0x8a}], 0x6}, 0x5a4c}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/183, 0xb7}], 0x3}, 0x7}], 0x3, 0x0, &(0x7f0000001f00)={r3, r4+60000000}) [ 191.744144][T10680] IPVS: ftp: loaded support on port[0] = 21 22:13:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a7900df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 22:13:59 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0xfdef) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000003400), 0x0, 0x0, 0x10}}], 0x5d0, 0x10000, 0x0) 22:13:59 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xfffffdef}], 0x300, 0x401eb94) [ 192.002746][T10710] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 192.104647][ T33] kauditd_printk_skb: 54 callbacks suppressed [ 192.104664][ T33] audit: type=1804 audit(1607811239.273:66): pid=10717 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir278306097/syzkaller.GIMngd/25/cgroup.controllers" dev="sda1" ino=15868 res=1 errno=0 22:13:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f00000000c0)) 22:13:59 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0xfdef) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000003400), 0x0, 0x0, 0x10}}], 0x5d0, 0x10000, 0x0) 22:13:59 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9a03}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x50}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) 22:13:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x10000, 0xfffffffd, 0x2, 0x8308}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 22:13:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_XFRM_POLICY(r0, 0x84, 0x76, 0x0, 0x0) [ 192.497893][T10727] IPVS: ftp: loaded support on port[0] = 21 22:13:59 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xfffffdef}], 0x300, 0x401eb94) 22:13:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a7900df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 22:13:59 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0xfdef) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000003400), 0x0, 0x0, 0x10}}], 0x5d0, 0x10000, 0x0) 22:14:00 executing program 0: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xfffffdef}], 0x300, 0x401eb94) [ 193.071313][ T33] audit: type=1804 audit(1607811240.233:67): pid=10749 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir278306097/syzkaller.GIMngd/26/cgroup.controllers" dev="sda1" ino=15868 res=1 errno=0 22:14:00 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xfffffdef}], 0x300, 0x401eb94) 22:14:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r0, 0x84, 0x0, &(0x7f0000000140)="ea", 0x10) [ 193.280825][ C1] ================================================================== [ 193.289344][ C1] BUG: KASAN: use-after-free in sock_def_write_space+0x609/0x630 [ 193.298512][ C1] Read of size 8 at addr ffff888031fa8b00 by task kworker/u4:6/10497 [ 193.306617][ C1] [ 193.308966][ C1] CPU: 1 PID: 10497 Comm: kworker/u4:6 Not tainted 5.10.0-rc7-syzkaller #0 [ 193.317589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.328124][ C1] Workqueue: bat_events batadv_nc_worker [ 193.333873][ C1] Call Trace: [ 193.337267][ C1] [ 193.340183][ C1] dump_stack+0x107/0x163 [ 193.344571][ C1] ? sock_def_write_space+0x609/0x630 [ 193.349991][ C1] ? sock_def_write_space+0x609/0x630 [ 193.355754][ C1] print_address_description.constprop.0.cold+0xae/0x4c8 [ 193.363040][ C1] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 193.368543][ C1] ? vprintk_func+0x95/0x1e0 [ 193.374052][ C1] ? sock_def_write_space+0x609/0x630 [ 193.380077][ C1] ? sock_def_write_space+0x609/0x630 [ 193.389188][ C1] kasan_report.cold+0x1f/0x37 [ 193.393993][ C1] ? sock_def_write_space+0x609/0x630 [ 193.399547][ C1] sock_def_write_space+0x609/0x630 [ 193.404789][ C1] sock_wfree+0x1cc/0x240 [ 193.409153][ C1] ? __sk_receive_skb+0x830/0x830 [ 193.414231][ C1] skb_release_head_state+0x9f/0x250 [ 193.419549][ C1] napi_consume_skb+0x200/0x480 [ 193.424568][ C1] free_old_xmit_skbs+0xe4/0x270 [ 193.429634][ C1] ? virtnet_set_coalesce+0x2a0/0x2a0 [ 193.435037][ C1] ? __lock_acquire+0x16b7/0x5500 [ 193.440105][ C1] virtnet_poll+0x325/0xd90 [ 193.444674][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 193.450686][ C1] ? receive_buf+0x5ce0/0x5ce0 [ 193.455513][ C1] ? mark_lock+0xf7/0x1730 [ 193.459958][ C1] ? mark_held_locks+0x9f/0xe0 [ 193.464744][ C1] ? lock_release+0x710/0x710 [ 193.469459][ C1] net_rx_action+0x461/0xe10 [ 193.474088][ C1] ? napi_complete_done+0x830/0x830 [ 193.479337][ C1] __do_softirq+0x2a0/0x9f6 [ 193.483885][ C1] ? handle_fasteoi_irq+0x9f0/0x9f0 [ 193.489113][ C1] asm_call_irq_on_stack+0xf/0x20 [ 193.494247][ C1] [ 193.497219][ C1] do_softirq_own_stack+0xaa/0xd0 [ 193.502279][ C1] irq_exit_rcu+0x132/0x200 [ 193.506824][ C1] common_interrupt+0xa3/0x200 [ 193.511915][ C1] asm_common_interrupt+0x1e/0x40 [ 193.517695][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 193.524242][ C1] Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 fe 53 6a f8 48 89 ef e8 86 08 6b f8 e8 11 f2 89 f8 fb bf 01 00 00 00 96 74 5f f8 65 8b 05 cf 1c 16 77 85 c0 74 02 5d c3 e8 3b 72 14 [ 193.544002][ C1] RSP: 0018:ffffc90001b57a08 EFLAGS: 00000202 [ 193.550116][ C1] RAX: 00000000000b0af7 RBX: ffff88801f6db480 RCX: ffffffff8155ab07 [ 193.558133][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 193.566143][ C1] RBP: ffff8880b9f349c0 R08: 0000000000000001 R09: ffffffff8ebb872f [ 193.574173][ C1] R10: fffffbfff1d770e5 R11: 0000000000000000 R12: ffff8880b9f349c0 [ 193.582204][ C1] R13: ffff88802529cec0 R14: 0000000000000000 R15: 0000000000000001 [ 193.590254][ C1] ? mark_lock+0xf7/0x1730 [ 193.594715][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 193.599960][ C1] finish_task_switch+0x150/0x7a0 [ 193.603541][T10727] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 193.605002][ C1] ? finish_task_switch+0x122/0x7a0 [ 193.605060][ C1] ? __switch_to+0x57c/0x1050 [ 193.605086][ C1] __schedule+0x89b/0x2130 [ 193.629126][ C1] ? io_schedule_timeout+0x140/0x140 [ 193.634465][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 193.640668][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 193.646943][ C1] preempt_schedule_notrace+0x5b/0xd0 [ 193.652464][ C1] preempt_schedule_notrace_thunk+0x16/0x31 [ 193.658417][ C1] lock_release+0x533/0x710 [ 193.663056][ C1] ? batadv_nc_worker+0x781/0xe50 [ 193.668208][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 193.673149][ C1] batadv_nc_worker+0x7a3/0xe50 [ 193.678042][ C1] process_one_work+0x933/0x15a0 [ 193.683020][ C1] ? lock_release+0x710/0x710 [ 193.687731][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 193.693224][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 193.698221][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 193.703367][ C1] worker_thread+0x64c/0x1120 [ 193.708145][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 193.713836][ C1] ? process_one_work+0x15a0/0x15a0 [ 193.719074][ C1] kthread+0x3b1/0x4a0 [ 193.723194][ C1] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 193.729122][ C1] ret_from_fork+0x1f/0x30 [ 193.733567][ C1] [ 193.735912][ C1] Allocated by task 10729: [ 193.740352][ C1] kasan_save_stack+0x1b/0x40 [ 193.745881][ C1] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 193.751548][ C1] kmem_cache_alloc+0x1c6/0x440 [ 193.756415][ C1] sock_alloc_inode+0x18/0x1c0 [ 193.761196][ C1] alloc_inode+0x61/0x230 [ 193.765552][ C1] new_inode_pseudo+0x14/0xe0 [ 193.770314][ C1] sock_alloc+0x3c/0x260 [ 193.770651][T10732] IPVS: ftp: loaded support on port[0] = 21 [ 193.774567][ C1] __sock_create+0xb9/0x780 [ 193.774580][ C1] __sys_socket+0xef/0x200 [ 193.774590][ C1] __x64_sys_socket+0x6f/0xb0 [ 193.774604][ C1] do_syscall_64+0x2d/0x70 [ 193.774618][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 193.774623][ C1] [ 193.774631][ C1] Freed by task 10: [ 193.774645][ C1] kasan_save_stack+0x1b/0x40 [ 193.774657][ C1] kasan_set_track+0x1c/0x30 [ 193.774670][ C1] kasan_set_free_info+0x1b/0x30 [ 193.774683][ C1] __kasan_slab_free+0x102/0x140 [ 193.774695][ C1] slab_free_freelist_hook+0x5d/0x150 [ 193.774708][ C1] kmem_cache_free+0x82/0x350 [ 193.774729][ C1] i_callback+0x3f/0x70 [ 193.844313][ C1] rcu_core+0x5df/0xe80 [ 193.848510][ C1] __do_softirq+0x2a0/0x9f6 [ 193.853017][ C1] [ 193.855352][ C1] Last call_rcu(): [ 193.859101][ C1] kasan_save_stack+0x1b/0x40 [ 193.863796][ C1] kasan_record_aux_stack+0xc0/0xf0 [ 193.869007][ C1] call_rcu+0xbb/0x700 [ 193.873091][ C1] destroy_inode+0x129/0x1b0 [ 193.877692][ C1] iput.part.0+0x3fe/0x820 [ 193.882123][ C1] iput+0x58/0x70 [ 193.885774][ C1] dentry_unlink_inode+0x2b1/0x3d0 [ 193.890913][ C1] __dentry_kill+0x3c0/0x640 [ 193.895514][ C1] dput+0x725/0xbc0 [ 193.899364][ C1] __fput+0x3ab/0x920 [ 193.903361][ C1] task_work_run+0xdd/0x190 [ 193.907922][ C1] exit_to_user_mode_prepare+0x17e/0x1a0 [ 193.913580][ C1] syscall_exit_to_user_mode+0x38/0x260 [ 193.919167][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 193.925067][ C1] [ 193.927409][ C1] Second to last call_rcu(): [ 193.932017][ C1] kasan_save_stack+0x1b/0x40 [ 193.936715][ C1] kasan_record_aux_stack+0xc0/0xf0 [ 193.941931][ C1] call_rcu+0xbb/0x700 [ 193.946020][ C1] destroy_inode+0x129/0x1b0 [ 193.950626][ C1] iput.part.0+0x3fe/0x820 [ 193.955053][ C1] iput+0x58/0x70 [ 193.958714][ C1] dentry_unlink_inode+0x2b1/0x3d0 [ 193.963850][ C1] __dentry_kill+0x3c0/0x640 [ 193.968545][ C1] dput+0x725/0xbc0 [ 193.972375][ C1] __fput+0x3ab/0x920 [ 193.976380][ C1] task_work_run+0xdd/0x190 [ 193.980915][ C1] exit_to_user_mode_prepare+0x17e/0x1a0 [ 193.986569][ C1] syscall_exit_to_user_mode+0x38/0x260 [ 193.992140][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 193.998037][ C1] [ 194.000383][ C1] The buggy address belongs to the object at ffff888031fa8a80 [ 194.000383][ C1] which belongs to the cache sock_inode_cache of size 1216 [ 194.014979][ C1] The buggy address is located 128 bytes inside of [ 194.014979][ C1] 1216-byte region [ffff888031fa8a80, ffff888031fa8f40) [ 194.028353][ C1] The buggy address belongs to the page: [ 194.034010][ C1] page:000000005fd4024a refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31fa8 [ 194.044378][ C1] head:000000005fd4024a order:2 compound_mapcount:0 compound_pincount:0 [ 194.053685][ C1] flags: 0xfff00000010200(slab|head) [ 194.059011][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff8881406f3b40 [ 194.067738][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 194.079864][ C1] page dumped because: kasan: bad access detected [ 194.087268][ C1] [ 194.089962][ C1] Memory state around the buggy address: [ 194.096431][ C1] ffff888031fa8a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.105611][ C1] ffff888031fa8a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.113961][ C1] >ffff888031fa8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.122335][ C1] ^ [ 194.126594][ C1] ffff888031fa8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.134863][ C1] ffff888031fa8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.143032][ C1] ================================================================== [ 194.151108][ C1] Disabling lock debugging due to kernel taint [ 194.157440][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 194.164048][ C1] CPU: 1 PID: 10497 Comm: kworker/u4:6 Tainted: G B 5.10.0-rc7-syzkaller #0 [ 194.174026][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.184132][ C1] Workqueue: bat_events batadv_nc_worker [ 194.189800][ C1] Call Trace: [ 194.193088][ C1] [ 194.195981][ C1] dump_stack+0x107/0x163 [ 194.200320][ C1] ? sock_def_write_space+0x5a0/0x630 [ 194.205789][ C1] panic+0x306/0x73d [ 194.210336][ C1] ? __warn_printk+0xf3/0xf3 [ 194.214958][ C1] ? asm_common_interrupt+0x1e/0x40 [ 194.220194][ C1] ? trace_hardirqs_on+0x51/0x1c0 [ 194.225264][ C1] ? sock_def_write_space+0x609/0x630 [ 194.230672][ C1] ? sock_def_write_space+0x609/0x630 [ 194.236067][ C1] end_report+0x58/0x5e [ 194.240246][ C1] kasan_report.cold+0xd/0x37 [ 194.245056][ C1] ? sock_def_write_space+0x609/0x630 [ 194.250437][ C1] sock_def_write_space+0x609/0x630 [ 194.255651][ C1] sock_wfree+0x1cc/0x240 [ 194.259997][ C1] ? __sk_receive_skb+0x830/0x830 [ 194.265068][ C1] skb_release_head_state+0x9f/0x250 [ 194.270393][ C1] napi_consume_skb+0x200/0x480 [ 194.275257][ C1] free_old_xmit_skbs+0xe4/0x270 [ 194.280210][ C1] ? virtnet_set_coalesce+0x2a0/0x2a0 [ 194.285597][ C1] ? __lock_acquire+0x16b7/0x5500 [ 194.290644][ C1] virtnet_poll+0x325/0xd90 [ 194.295171][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 194.301161][ C1] ? receive_buf+0x5ce0/0x5ce0 [ 194.305948][ C1] ? mark_lock+0xf7/0x1730 [ 194.310386][ C1] ? mark_held_locks+0x9f/0xe0 [ 194.315161][ C1] ? lock_release+0x710/0x710 [ 194.319884][ C1] net_rx_action+0x461/0xe10 [ 194.324491][ C1] ? napi_complete_done+0x830/0x830 [ 194.329709][ C1] __do_softirq+0x2a0/0x9f6 [ 194.334233][ C1] ? handle_fasteoi_irq+0x9f0/0x9f0 [ 194.339446][ C1] asm_call_irq_on_stack+0xf/0x20 [ 194.344511][ C1] [ 194.347470][ C1] do_softirq_own_stack+0xaa/0xd0 [ 194.352604][ C1] irq_exit_rcu+0x132/0x200 [ 194.357162][ C1] common_interrupt+0xa3/0x200 [ 194.361949][ C1] asm_common_interrupt+0x1e/0x40 [ 194.366988][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 194.377324][ C1] Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 fe 53 6a f8 48 89 ef e8 86 08 6b f8 e8 11 f2 89 f8 fb bf 01 00 00 00 96 74 5f f8 65 8b 05 cf 1c 16 77 85 c0 74 02 5d c3 e8 3b 72 14 [ 194.396941][ C1] RSP: 0018:ffffc90001b57a08 EFLAGS: 00000202 [ 194.403025][ C1] RAX: 00000000000b0af7 RBX: ffff88801f6db480 RCX: ffffffff8155ab07 [ 194.411252][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 194.419425][ C1] RBP: ffff8880b9f349c0 R08: 0000000000000001 R09: ffffffff8ebb872f [ 194.427439][ C1] R10: fffffbfff1d770e5 R11: 0000000000000000 R12: ffff8880b9f349c0 [ 194.435428][ C1] R13: ffff88802529cec0 R14: 0000000000000000 R15: 0000000000000001 [ 194.443430][ C1] ? mark_lock+0xf7/0x1730 [ 194.447861][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 194.453148][ C1] finish_task_switch+0x150/0x7a0 [ 194.458195][ C1] ? finish_task_switch+0x122/0x7a0 [ 194.463408][ C1] ? __switch_to+0x57c/0x1050 [ 194.468134][ C1] __schedule+0x89b/0x2130 [ 194.472571][ C1] ? io_schedule_timeout+0x140/0x140 [ 194.477898][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 194.484073][ C1] ? preempt_schedule_notrace_thunk+0x16/0x31 [ 194.490160][ C1] preempt_schedule_notrace+0x5b/0xd0 [ 194.495552][ C1] preempt_schedule_notrace_thunk+0x16/0x31 [ 194.501461][ C1] lock_release+0x533/0x710 [ 194.505983][ C1] ? batadv_nc_worker+0x781/0xe50 [ 194.511111][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 194.516007][ C1] batadv_nc_worker+0x7a3/0xe50 [ 194.520908][ C1] process_one_work+0x933/0x15a0 [ 194.525874][ C1] ? lock_release+0x710/0x710 [ 194.530572][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 194.535959][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 194.540907][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 194.545945][ C1] worker_thread+0x64c/0x1120 [ 194.550637][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 194.555696][ C1] ? process_one_work+0x15a0/0x15a0 [ 194.560904][ C1] kthread+0x3b1/0x4a0 [ 194.565155][ C1] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 194.571063][ C1] ret_from_fork+0x1f/0x30 [ 194.576043][ C1] Kernel Offset: disabled [ 194.580407][ C1] Rebooting in 86400 seconds..