[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. 2020/05/23 12:33:24 fuzzer started 2020/05/23 12:33:24 dialing manager at 10.128.0.26:38661 2020/05/23 12:33:24 syscalls: 3055 2020/05/23 12:33:24 code coverage: enabled 2020/05/23 12:33:24 comparison tracing: enabled 2020/05/23 12:33:24 extra coverage: enabled 2020/05/23 12:33:24 setuid sandbox: enabled 2020/05/23 12:33:24 namespace sandbox: enabled 2020/05/23 12:33:24 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 12:33:24 fault injection: enabled 2020/05/23 12:33:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 12:33:24 net packet injection: enabled 2020/05/23 12:33:24 net device setup: enabled 2020/05/23 12:33:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 12:33:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 12:33:24 USB emulation: enabled 12:35:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80000, 0x0) fchmod(r3, 0x42) r4 = gettid() r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) syzkaller login: [ 174.318462][ T6821] IPVS: ftp: loaded support on port[0] = 21 12:35:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2882, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x5001, 0x0) dup2(r1, r0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5001, 0x0) [ 174.502178][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 174.587282][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.595743][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.604941][ T6821] device bridge_slave_0 entered promiscuous mode [ 174.616094][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.623471][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.632168][ T6821] device bridge_slave_1 entered promiscuous mode [ 174.658457][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.674137][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.731723][ T6821] team0: Port device team_slave_0 added [ 174.740090][ T6821] team0: Port device team_slave_1 added [ 174.758432][ T6959] IPVS: ftp: loaded support on port[0] = 21 12:35:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 174.794450][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.804888][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.832564][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.869342][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.877331][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.905885][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.038841][ T6821] device hsr_slave_0 entered promiscuous mode 12:35:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300f32ef0f750b50f012a163066b969025eea0f3266b99f0000e7400f01b386003266654757b8ec111000b1b101c10f23c80f21f866350800a0000f23f8b82b000f20d8663508000000bad0040f18c60f01bd0050", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x114000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 175.110834][ T6821] device hsr_slave_1 entered promiscuous mode [ 175.205045][ T7007] IPVS: ftp: loaded support on port[0] = 21 [ 175.425365][ T6959] chnl_net:caif_netlink_parms(): no params data found [ 175.489468][ T7118] IPVS: ftp: loaded support on port[0] = 21 12:35:22 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) keyctl$unlink(0x16, 0x0, 0x0) pipe(0x0) [ 175.727498][ T6821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.797330][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.808985][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.832709][ T6959] device bridge_slave_0 entered promiscuous mode [ 175.853199][ T6821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.924622][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 175.947702][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.957666][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state 12:35:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) [ 175.972585][ T6959] device bridge_slave_1 entered promiscuous mode [ 175.993436][ T6821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.077084][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.089368][ T6821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.190998][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.229618][ T6959] team0: Port device team_slave_0 added [ 176.261813][ T7281] IPVS: ftp: loaded support on port[0] = 21 [ 176.272395][ T6959] team0: Port device team_slave_1 added [ 176.296859][ T7118] chnl_net:caif_netlink_parms(): no params data found [ 176.309008][ T7372] IPVS: ftp: loaded support on port[0] = 21 [ 176.404455][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.411854][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.438876][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.483007][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.493602][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.502135][ T7007] device bridge_slave_0 entered promiscuous mode [ 176.516168][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.523420][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.532226][ T7007] device bridge_slave_1 entered promiscuous mode [ 176.539905][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.547318][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.577770][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.649780][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.695324][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.754248][ T6959] device hsr_slave_0 entered promiscuous mode [ 176.801561][ T6959] device hsr_slave_1 entered promiscuous mode [ 176.840584][ T6959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.848432][ T6959] Cannot create hsr debugfs directory [ 176.938641][ T7007] team0: Port device team_slave_0 added [ 176.948034][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.956752][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.966553][ T7118] device bridge_slave_0 entered promiscuous mode [ 176.998707][ T7007] team0: Port device team_slave_1 added [ 177.016542][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.024574][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.035117][ T7118] device bridge_slave_1 entered promiscuous mode [ 177.044519][ T7281] chnl_net:caif_netlink_parms(): no params data found [ 177.105225][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.115065][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.144096][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.164752][ T7118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.223189][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.232592][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.264346][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.301103][ T7118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.332586][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 177.403905][ T7007] device hsr_slave_0 entered promiscuous mode [ 177.440952][ T7007] device hsr_slave_1 entered promiscuous mode [ 177.491349][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.499240][ T7007] Cannot create hsr debugfs directory [ 177.565370][ T7118] team0: Port device team_slave_0 added [ 177.575212][ T7118] team0: Port device team_slave_1 added [ 177.639643][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.650027][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.664187][ T7281] device bridge_slave_0 entered promiscuous mode [ 177.708119][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.722061][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.729132][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.737850][ T7281] device bridge_slave_1 entered promiscuous mode [ 177.747342][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.757826][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.784722][ T7118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.800370][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.807335][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.834513][ T7118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.977060][ T7118] device hsr_slave_0 entered promiscuous mode [ 178.030871][ T7118] device hsr_slave_1 entered promiscuous mode [ 178.070394][ T7118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.078982][ T7118] Cannot create hsr debugfs directory [ 178.104940][ T7281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.126713][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.136063][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.146150][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.153619][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.171717][ T7372] device bridge_slave_0 entered promiscuous mode [ 178.180992][ T7281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.213315][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.220928][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.228019][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.237506][ T7372] device bridge_slave_1 entered promiscuous mode [ 178.292102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.302131][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.311378][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.318543][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.327151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.336512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.345252][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.352439][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.367275][ T6959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.437215][ T7281] team0: Port device team_slave_0 added [ 178.451729][ T7281] team0: Port device team_slave_1 added [ 178.486370][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.502005][ T6959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.543964][ T6959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.600710][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.624844][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.632752][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.660399][ T7281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.675492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.688180][ T6959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.767603][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.779203][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.786617][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.813275][ T7281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.824808][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.881865][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.891566][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.900890][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.909577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.919002][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.935116][ T7007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.973711][ T7007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.073592][ T7007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.156147][ T7372] team0: Port device team_slave_0 added [ 179.169933][ T7372] team0: Port device team_slave_1 added [ 179.254355][ T7281] device hsr_slave_0 entered promiscuous mode [ 179.320862][ T7281] device hsr_slave_1 entered promiscuous mode [ 179.360432][ T7281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.368129][ T7281] Cannot create hsr debugfs directory [ 179.374815][ T7007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.433453][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.442953][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.452253][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.461361][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.482002][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.572599][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.579577][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.609001][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.622624][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.629689][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.656791][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.674348][ T7118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.764389][ T7118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.836228][ T7118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.934823][ T7372] device hsr_slave_0 entered promiscuous mode [ 179.991980][ T7372] device hsr_slave_1 entered promiscuous mode [ 180.030701][ T7372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.038316][ T7372] Cannot create hsr debugfs directory [ 180.073550][ T7118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.162401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.170182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.209147][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.278542][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.349622][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.365365][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.380225][ T7281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.430871][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.439675][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.453188][ T6959] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.481045][ T7281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.534689][ T7281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.593126][ T7281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.649087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.658795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.669549][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.676837][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.686578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.719103][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.735873][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.745803][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.756631][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.766242][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.775591][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.783353][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.804838][ T6821] device veth0_vlan entered promiscuous mode [ 180.818714][ T7372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.862695][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.871789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.879611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.890749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.915354][ T6821] device veth1_vlan entered promiscuous mode [ 180.927540][ T7372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.993826][ T7372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.054224][ T7372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.116166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.125509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.134702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.144424][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.178726][ T6959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.189332][ T6959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.203975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.213851][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.225600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.236563][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.246423][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.256087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.284840][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.293082][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.342791][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.357754][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.365801][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.387986][ T7118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.418484][ T6821] device veth0_macvtap entered promiscuous mode [ 181.440583][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.454696][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.463871][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.473724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.492354][ T6821] device veth1_macvtap entered promiscuous mode [ 181.500963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.509221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.522265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.531511][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.538818][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.549097][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.579712][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.608214][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.616664][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.627773][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.637541][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.647057][ T3245] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.654344][ T3245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.662896][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.672125][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.681330][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.704269][ T7281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.740714][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.753623][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.763261][ T2689] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.770575][ T2689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.778892][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.788456][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.801155][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.809774][ T2689] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.817287][ T2689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.825517][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.835503][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.846432][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.855622][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.865119][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.893965][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.914040][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.922518][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.933014][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.942508][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.952546][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.963669][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.988315][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.997504][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.006778][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.015133][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.023879][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.035242][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.047372][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.077986][ T7007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.088550][ T7007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.109244][ T7281] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.127096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.137517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.147556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.156406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.165613][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.175007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.184655][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.194644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.204014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.213447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.222762][ T6959] device veth0_vlan entered promiscuous mode [ 182.244902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.254080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.265174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.296218][ T7118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.311655][ T7118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.432880][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.449500][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.459546][ T2489] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.466731][ T2489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.476469][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.485516][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.494241][ T2489] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.501507][ T2489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.509133][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.519152][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.527818][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.553150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.562539][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.574364][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.583664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.593999][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.603711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.626952][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.634685][ T6959] device veth1_vlan entered promiscuous mode [ 182.700898][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.709805][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.740627][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.748292][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.766876][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.778597][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.795423][ C0] hrtimer: interrupt took 36358 ns [ 182.797697][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.818464][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.842134][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.863246][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.896764][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.904918][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.921341][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.928926][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.948668][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.984463][ T7118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.023032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.032999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.043430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.052457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.060104][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.069626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.081729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.091494][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.100119][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.107614][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.117549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.134468][ T6959] device veth0_macvtap entered promiscuous mode [ 183.161558][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.171837][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.182822][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.197157][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.204413][ T7884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.226518][ T6959] device veth1_macvtap entered promiscuous mode [ 183.243254][ T7281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.269116][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.282095][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.291181][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.300059][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.326420][ T7007] device veth0_vlan entered promiscuous mode [ 183.336198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.353014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.366287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.375335][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.398963][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.416298][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.428678][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.438071][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.451406][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.465715][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.487360][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.496798][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.508910][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.526676][ T7007] device veth1_vlan entered promiscuous mode 12:35:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80000, 0x0) fchmod(r3, 0x42) r4 = gettid() r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 183.557571][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.568186][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.580159][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.615312][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.642054][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.658000][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.667672][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.681196][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.689885][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.700318][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.712142][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.744902][ T8093] ptrace attach of "/root/syz-executor.0"[8092] was attempted by "/root/syz-executor.0"[8093] [ 183.772492][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.791237][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.800965][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.809211][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.824699][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.834003][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.843469][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.852026][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.863984][ T7118] device veth0_vlan entered promiscuous mode [ 183.917768][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.928410][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.942495][ T7118] device veth1_vlan entered promiscuous mode [ 183.959247][ T7007] device veth0_macvtap entered promiscuous mode [ 183.999423][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.008037][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.017362][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.037082][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.046824][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.058780][ T7281] device veth0_vlan entered promiscuous mode [ 184.075805][ T7007] device veth1_macvtap entered promiscuous mode [ 184.121258][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.129330][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.160689][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.186118][ T7281] device veth1_vlan entered promiscuous mode [ 184.208384][ T7118] device veth0_macvtap entered promiscuous mode [ 184.237297][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.276015][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.289665][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.310969][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.323917][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.337881][ T7118] device veth1_macvtap entered promiscuous mode [ 184.369778][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.389474][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.411265][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.425861][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.439959][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0 12:35:31 executing program 0: [ 184.468430][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.477842][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.487913][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.498237][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.527661][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.539865][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.558759][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 12:35:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0x1041d, 0x2) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/31, 0x1f, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r9}, 0x78) [ 184.578018][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.593137][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.603484][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.617010][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.636156][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.654206][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.668899][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.680994][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.694214][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.726735][ T7281] device veth0_macvtap entered promiscuous mode [ 184.737036][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 12:35:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0x1041d, 0x2) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/31, 0x1f, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x78) [ 184.771743][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.781926][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.793552][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.804629][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.815983][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.832221][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.862775][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.879795][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.899834][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.910369][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.922995][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.937327][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.974496][ T7281] device veth1_macvtap entered promiscuous mode [ 184.999694][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.019649][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.029488][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.041131][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.049974][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.061327][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.146978][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.159179][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.215662][ T7372] device veth0_vlan entered promiscuous mode [ 185.276571][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.284825][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.293471][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.305282][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.318769][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.329757][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.340830][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.351734][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.363230][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.374713][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.386491][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.517623][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.526835][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.548467][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.573675][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.592888][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.598129][ T8125] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 185.612063][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.640262][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.660247][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.678536][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 12:35:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000001980)={@void, @val={0x0, 0x0, 0x0, 0xe80}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x1298, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x1b, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c2f9a640b2d847d527357902538828abd66b3d1a9b85034066154f0b2ec054f6a8712ec98e5"}, {0x0, 0x1f, "8cf0833ae2772f05d302c778833be4f2b9c43c83284b82e71ca1ee382af46513079a2f52da08c93afdfc1a18e4b677b307a1c7df90787cbd143b129bc8dbc39104eb21674d26fd4ced8626df256869e168d42f4d160ad1442cae2bd8fda0fc44a08759d245bfe8eba42ec7967c1e953256a057369159333bca73b498a882fb5e840d429804169a6446c1d1b013144ae0ee276a463ef69ea4c4636751083041811c9b549256c6a3a71e451f8fd4de25629b3de61cba78315412fa14e350bb03feaf63909bd7320561df80bc77f36d4561a5efcc324450355ed398d9e46e798e23e2a4a2c787728b9c549a1894c53dcdfe834c7785fb3c4331"}, {0x0, 0x3, "6598975984c98199c07565e33783bc472344c2fc4e6a32"}, {0x0, 0x1f8, "631c74c9d1ae5f26763e689d7358d52b9d78e1af1392b0a090488b19cbc96370f62d48c23e1427c05acd9c3b3f073a763d782618ff1eec26b515a9b327cbc17f30d83b25eb0642880dfa19be7390bfd822af60a6c50ca6e86b5a7a713194fb7fd8d6fbabab53a0be384d6197ec95d58387c3c60474093fafe7b973081f27ecda4197fda48a1f93aef6f2fe0790ee4c44b9311e6a55f85e9a53c1b9d12d9b586d5e9c0f98d3d6f5e215a0392bc0f0747ce75347ce29eea158c0f1ff30ecf208af154508b0c1f57d03d6e884937b7d84b3170624b4ebb76df8681493b4ff2f5cb6ab9fc4745569c2105f1eef9e9e3b7f10aa79b3746d194b78719295ce4ca9a520a08a67241d6770b93eb3a0b12e0ae16886e6a6312f858009dfc6736efec7498718a3c84b37267e49860fcf486442c2f06179672b3a6d1afac32246207723f9f43a7afc4e63820609c8a44dd4a88cdec819602a152eb4403f842712fd75ea44c779e98ff01f41caba247ef6434df425ff6bf93d49d1a8a08e455f2d86ff55773d57b611dd0e464d6b5e139271a91c6c8c629b694364730a38ddbe897a252620a2e41167afc48833290e0859615328f9dd7ba13514af6e3b3ca4e6514d400ad062a3519a85c4c79265bc284308602e73254a6ad85e76649c9b48f6785971a0e01ff0fe22de2c1c0b7ff27cf7e46f022d0b1a3c3a9ba65bcba1901c95e20ce39c24ff76acf7c4a3771e114a760448dbcd88c54351ee97a903c554564866eefb0964b5fe6ba26e73b64273c3f5d8079620cd509a3d88c19d09b5cc4256f38d263e105a94cfd44305e8c2755f90fd580628f0550268c95a1193362c265e0025ebdb42e58e2afcc38edbb77eedc486564a16e2405a99a382cfe15b03b097c10cb1651c2cb4bc7c5df969fb5ce19a6c8d3accb5b67dcf11fcfb6c028107c6b93c6a9b9c659dc05549a6fb1732f67cfc0ae5fe425245b72dbb6a719f83887a8af64ea8d1b3764ce0684f2d748a057d3ee3158d58266a560f8e04777a1f303163304d08b5bd470f627e0a13928e46fd0847bde599510e6978d68bb75f40ac4e247fc8708ca82ad40e729c3de042c94756d3816083784644d5e666fb3810117a62f7508ae3cdcdf312e314acd9add8e9c3e473ae206bd9b25659db6c1f570777f408644dcc6d150e92f284ad68d4bbe1f52e0c36e88a0d083dee8f7d59540b2ddda7fd27c97abc268630cbcad1e9cdd88c0a075462288bbf59824497ba7df15bc34d9fd22f8508a6d1c90118676ad3f9fc03cea1c69594dff6e978f42d1da2011290872e062fb2cc3293030534a6cedb6f461b33b5fd90b2ee0a8ae6803f45f4f2e74fac772ce235d66e8625951d7acbc87f1c4e13cbf0c01e8909de72d3b78b7d945b53e50f38486556dc6fd58db1a1da7f9cda6b50278a73d58842f15117c0232e6860caaab9be2d010ab4c5689a0ea14d78a5ec2dde3e837cadd8e1c794168860a4e303d513cc099d79cbb7605419db906a76d44ea62c6a767fb0f5cf25325a63c4939e1e8eb8df73645b5e9c4eebe6f736706708a8b0b5eebe263d846a9dedd9cb30365f3605cde065ae8fa4cb1075b87485ec0ccbabbe3033901e273234c688136c0960932e2ecd38870b7e72ca635a6e6d23cac391686fd2b7e5aac1c6862242dffc5a656922fbd23a6a8cae9f5a19b8778409987b26442739325b05ce005b215d1843278d767de541646d03cb4a3cfe32ecd2c686b8a550e12945b53bd87ae4387bc7876d1d17f3043a536e2319b760100963de494461c3dff0dc546ade451a393f08107cd419d1a075e7ce14cb082dabb30f61e67a9772aa384ee22505f0f54a58637abea7d3aa2263e744d2f99deefc0a6e2c225b0e14f3eae792b74a289920331b5d08aa748a123e3ccd2e7918495de5ad88068f6a2bc49c0bea736aaf68c21991ddb622522c9e6907ccc0716f394fa97da40beb33db9dbea01e2d07c6425853baffdd8ed2dc0d3ef710f518393634d7e312ea87093957de12f667d2c7a73ada38d95583ec1c3b8ba18bb6f592592a690a63a257b2792c8e75b98b46584082f240301facf10ef823003392d908af8386a403810fbb14a0bf56c9c718ea0e2eb8f478974fb9beb74bfc3fb13fa71babce0fa67e57950c2022dc5580b4a0e66740bc2f11dd4866f786bfb8c4b0fa78cf36d0baff865e0051dfbadcc0fc1bb4a4d89544375500bd08c8b219aba4213e081549239847b1b11cf51a72c26654f0d40b42b69178377ee9819b896c36e70304705aa6d1de33b77b6456fdf05de27813089e6bb5089a1ff02c361a8cc0e35454eff7d06033d02b0e66fd1d542115523c25bc49aea964ff93fe12bafabe723c16a6f9e669540e83d2dd64296b59dccdd553659bf15eec6598f32dfddd5f08380f4382e88e4441135abff53f7990c0c38f8a9f103082bd6009d059852f44bbdd2d8fbeebee4fe0822d205534fa1bec74b8e41ad2314f4742201f32202c21875731f87b86e1062270a3620dc3c5d4818618063379c97a29cf76acd17caf996d186a70d8385655048299538c8eb91fd25891125e5d317d6ca064bee38526fdfb4da1769e1bfddda5e1e64e7eeef125895ab9cf9db641b03ab5ec70633e8b79c665fa37e98cfbf23b176fc6d60668b25020420c81d77bebb0d32c63326bc9f88a8d2c226a85e54d7a44583e0f5b1f7cb52dacb769b57834ddf38ef5abd017f20f115daa51dea5bcbd58ea7a90ca042357927032040291dedf20c20eab92a384a23ab282db6c2a5c89b001a4dea0688cc7ca51a120390be070e07c618cb6b0e8c9106c0d2eabfb645e5b1fa9ef878df5861431e78e9c7ac12ceec025304a4d3351204c9bf7045a3b889f20321599f3f4c9c23169d1d10ace235dfb44edc3b9582dacef2269d5d07bf4555eec665dc307daef0aaaa0f7e44764fda59a861e67c1ce55de3515df6cec910c5fbb87aa9e100c290696ef366bb69b5d2de38d2f2d99413428c9761b0dd6bc5bd8c9c5e4f22c5f2ea5b666fa694359339d2e7e9ab6622b205713c7815edaeb01b2e63ff267e4ad2f66c267a2dae50a830d0b58bb0041bbbe43f6da01fd29e6fae8a8676d366ce2e31d9f61e257dd3ba7da8504fd00eb265c02cbd9d5e1c4955b85190c9bf085fdb54350ee9074c57c7add37bf6a614be01bba4871816ddc0c7e47797ee0d7c53b06352957dd546063f1593263e945ff319dba2bcef8f18844fecb244e9ca42a012774b137e86346a021934d30f2f8fb2cd906b45260154ce17d1cf1836654791bbd378f329a588ddcfd26b87296a17fe5077ec9968f47c4ca921dface81395435873af808472eb42eb12b92dbb4cc26683e21811cd13d8d273fbf3aa75204af1f593a5b423f9537a63308a945757d5f44c99e7eeebc506ec5f28729bd38b988babc33b570f8feca7a50c0966c66f063324fa504de647f7fc7f1d18bf94ae0899b758ee0ad1bb238dfd26a4ce6f3e7fdd1dd1b062b5cd493f4aa6eb08c6cb0510c696983a254c09197c1bfb784d5947a1329d7add6d3ddef0ad4b9ec93dee717788dd223feeab64acf9a73f24996d2e7d698b18607fc9a12b94d6ceafc680d9d91a1cfbf2d5fd6d0a9070d77b7f2204665b3a94f1e6245ecf7a1c671ee987fc0c67e7a26ed5e41862c5ddfa9a8344e1d8a88ca653a2efeb6e8fba6153fff8b279317ef0d65115073b38ab74d451cb58b75812231fd6282b7544fe4412ccea896e899a8f352269f60eb2383acfe60ab315c0f7ca43112bb898c051f6f07097d584e4f743f75d304b46b6b8c0e4825f987de99f24995dde490d7da0b47400a77fc8c39e5953b491a1bddf5d55fbb27e322bdc33e04fcbaf26f93b79c3030d920472b7694810195a02dc792d9ed4b43cedb72647c3005002eab924aa8ffaaecba42aa79eb3f4fb0b9e87317df11a79320a2d5bc83ad25fb139d45b843db5f8002b5cbf33812685fd9d5b994d370e8fd5333fa936ca9940f236b2c2e201912a7781dfca80497df9327c167d4d985db50e45fdb81c6eca85a3a4d0574d75e897ff98a23bfb122438f8f62a8422e0aff85febdc54e42bd05569a95717faf06eaea46b6b3e9335a1a60a922d8e79c153324cad570ee4efa53687280de0814071352d9c6ee939eaf3e89a09887b3bd9105a888635fcd190bcebc98ce4688665b8f827a2f0f1992fa90c4921342026de6fb0d31df3aaeba026678d7425a9c2f7cb2bfd7037cf81f814492f299a29b61e2a6ae386510caf4823e520365204ebc962504cb8997a51aed2903cba9fb52e015659a4fed914f7ecaa3cf3080da45a3d95c881dbb17639c31c9d833f270af042acf467dd492e6fa636e3df3ce7f28455fdd984e609c63170ffd55a0bb2debe6a4efa7228b47d455da6bbd83319620c16c63c2675dedaea4c4d65fa50ae7786621f45b67d022d546b91edda149af142d2a720c238f5e940d701cdb27439c7ff666f80b31ab695d3852bc5f4da0c39e588badb3e49153ea153b5894ee9fdebdb1bc3b6270644fb9f9d9dd3c4089932ec8fd9090d01c7a4eda7e1c1f304b59fed6ab77440eefb0324a8f5d127be662264399b5a4a41979e2a10d2905d9c265dd492edc5df03312f89c5094ff1b7f9ec10b68eb230687b5850a6a5643066fd1ad5c05bc1e8caa2289efafca0e93a284069a2120dd96dc2677e5b913beea0e75afa45e0140aadb7e566799ecbb47c6aa0ce03503ef8da94b2668fcf90e6bba60581590a2ac73c1c419941d0f2c013306d6ea9091a9eacc053213a58b24a6f7497632690083653c19715bcabfeafcebc22b54c6a1f71132c45ae7af19f8b25bdd83851527c63f1d23cb3ea18040475372bc99090e70282d536df518e6e421b4749d2334db9212c01219d6be9693e2f313b61b3a3c34ec932300db3c696d9ee8cbc138c8828f4d956abd0ce0d4b7b4a1ca0904c096befac1d9e48c64f0063554cdff3b77bd80791408c7ddf5759c86b7ca79e55d81b624dfc7b1a7dad93497a3325c53101174876654ce91d827ee124df73708eb88364d9cc3b4847f735d21d5a4f1ed962f51bdd18ae17a4b31eb0044aaa52b561ed84326d39ed7ab2bde55ea620cee86e43b549e7440a9a64efd748b081def3a956e350b66de06bd20dbd5fc86e6eb502be1977c1c83fcb774bba5803cec4f8ef11d3f7d9fb5a225a2f3dd6c9ac755230d1fcba418bebe56ec0cc7318422e362ae7626dc803bda3bf720fb753e586188b030fc6f02a94860d66915b7d4360a87f742ef006eb7dead1d3c9dca6c7ad71096a3040e6869bafa190bb64efdf8ecabd4a61eac2a772e29bcfbfa5021c070fccbc769631e123748c43da6f9f3268ae92aa211ccff1e03368a643b65757b3620bff11a7399c08a851719bd2bd1fb5ae4a0e19002b52f4caef8573a6b4ccee2802f9726fece0e44e192ef4384fce88aa23ad46a36b32ceea3510aae6522f4d407b30f0c551f70ee6bab475df4ac6d75d9aaeac309247eab00e9556c45386522ab5922195895568ed0ccb47d5a0320080b2ec1bdbdf3013c10755eca1b30e04b50cf9cf9bed3074e8ee1eaba87787afc58129ac917ca80bbb86557c6288a99b3850f2137ebf51558ea68f854014b29e9f2329bfd01a2154fd3847c605f2d079f0b0b5c7f0871ca819e97192760f5c0407907a7d6c96950"}, {0x0, 0x1, "005a581c6e87"}]}}}}}, 0x12ca) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 185.730709][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000009c0)=""/233, 0xe9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e005b1) shutdown(r3, 0x0) shutdown(r4, 0x0) [ 185.779504][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.799089][ T7372] device veth1_vlan entered promiscuous mode [ 185.866935][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.894137][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.930129][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.013700][ T8150] x_tables: duplicate underflow at hook 2 12:35:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/136, 0x88}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/176, 0xb0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x42) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x2769, 0x0, 0x0, 0x800e0054e) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) shutdown(r4, 0x0) [ 186.091349][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.103153][ T8150] x_tables: duplicate underflow at hook 2 12:35:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) read(r0, &(0x7f0000000300)=""/53, 0x35) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000100)={0x0, 0x10000}, 0x10) readv(r1, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)=""/233, 0xe9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1b60, 0x0, 0x0, 0x800e007af) r3 = dup(r2) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000000)=""/12, 0xc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) shutdown(r3, 0x0) [ 186.491784][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.501720][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.546285][ T7372] device veth0_macvtap entered promiscuous mode [ 186.632571][ T7372] device veth1_macvtap entered promiscuous mode [ 186.721062][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.770145][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.802099][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:35:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000000c0)=""/51) [ 186.825995][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.870799][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.896068][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:35:33 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffefc) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfffffefc) [ 186.940609][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.969378][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.021217][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.055419][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:35:33 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000398000/0x4000)=nil, 0x907100, 0x0, 0x0, 0x0) [ 187.100178][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.154839][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.163525][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.186139][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.216841][ T3245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.247221][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.275531][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.313972][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.330929][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.352980][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.368888][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.398334][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.417700][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.427726][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.445252][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.469281][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.517395][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.534484][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.544023][ T8217] mmap: syz-executor.4 (8217) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 12:35:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000080)=""/196, 0x20000144) read$snddsp(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) 12:35:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="edbfd8cff53a27b18901"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xfef0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 12:35:34 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x0) 12:35:34 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2}, 0x8) 12:35:34 executing program 3: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa1c83d594616631686ec9cbb32a14b175d"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) gettid() ptrace(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x14f) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0xfffffefc) 12:35:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100005070000f0000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="02"], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) [ 188.005570][ C0] sd 0:0:1:0: [sg0] tag#3942 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 188.016318][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB: Test Unit Ready [ 188.024161][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.034697][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.044594][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.054339][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.063978][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.073643][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.083361][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.093097][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.103532][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.117244][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.127139][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.132915][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.137215][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12:35:35 executing program 2: set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfffffefc) [ 188.137242][ C0] sd 0:0:1:0: [sg0] tag#3942 CDB[c0]: 00 00 00 00 00 00 00 00 12:35:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@private0, @dev, @ipv4={[], [], @broadcast}, 0x0, 0xac86, 0x9}) 12:35:35 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe456, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000a00000a1f000002141008000800040012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) [ 188.239865][ T8235] team0: Device ip6tnl0 is of different type 12:35:35 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xfffffefc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3}) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000200)=0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x50) gettid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 188.353240][ C1] sd 0:0:1:0: [sg0] tag#3943 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 188.364172][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB: Test Unit Ready [ 188.371051][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.381077][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.391195][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.400942][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.411338][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.420983][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.430798][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.440388][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.450822][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.460409][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.470048][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.479704][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.489336][ C1] sd 0:0:1:0: [sg0] tag#3943 CDB[c0]: 00 00 00 00 00 00 00 00 12:35:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$describe(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 12:35:35 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010000fff2abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128008000100687372002800028008000200", @ANYRES32=r3, @ANYBLOB="0a0004000180c2000002000008000100", @ANYRES32], 0x54}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 12:35:35 executing program 1: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 12:35:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12:35:35 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(0xffffffffffffffff) listen(r0, 0x100009) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) [ 188.782368][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:35:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x3e9, 0x0, 0x0, 0x0, {0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x34}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:35:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x198, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "0b7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'macvlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000001400)={0x2, 0x4e23}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)="5db12812fbe86849960c82b82c9dde8e3f4c9f447c04fc3be10360614ef8c9d5608df99218da0b31a40dd63575854cad0ab2f29859585a0c1d2e5afd121d00e29a19cee211e0f1f0b161ee5cc50a0b5491f9f0182722631d7d8720490a5c09035d07e169c26bb02cb87db7a2248afce45270a3f4327aa9a0e75ceb3552c5868e9a1a501266b040623014669f1801344ad1461026b39c4d26ef2d9dc814d8979b74dd869c3ab6ad1d845276efaf4571c1e99355e38649a52cd5df3827d20e71e206bbe6818b8bb01a", 0xc8}], 0x2) [ 189.060232][ T8284] No such timeout policy "syz1" [ 189.107056][ T8284] No such timeout policy "syz1" 12:35:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000000000001"]}) 12:35:36 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600cfdff00032c"], 0x0) [ 189.539676][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:35:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4860332", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000200000004"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90) 12:35:36 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000398000/0x4000)=nil, 0x907100, 0x0, 0x0, 0x0) 12:35:36 executing program 4: unshare(0x20000) r0 = creat(&(0x7f0000000080)='./file2\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f00000000c0)='./file0\x00') 12:35:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:35:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x5c}}, 0x0) [ 189.761481][ T8310] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.924342][ T8317] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 189.995834][ T8320] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 12:35:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6ec}]}, 0x24}}, 0x0) [ 190.087549][ T8314] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:37 executing program 1: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="0401000010000507000000001000000081001e37", @ANYRES32, @ANYBLOB="210b020000400000880012800c0001006d6163766c616e0078000280640005800a000400ffffffffffff0000ea0004000180c200000e00000a000400ffffffffffff00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa00000a0004004806ea80e40300000a000400aaaaaaaaaa180000080001001000000006000200010000000a000500040000000000000008000a00", @ANYRESDEC=0x0], 0x104}}, 0x0) 12:35:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 190.453234][ T8333] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 190.480438][ T8333] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.585161][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.957743][ T8351] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 190.989695][ T8351] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 12:35:38 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) socket(0x100000000011, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x508) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x0, 0x18}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r4, r2, 0x0, 0x26) 12:35:38 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0}}], 0x2, 0x0) 12:35:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() sendmmsg$unix(r1, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}], 0x1, 0x0) 12:35:38 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 12:35:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 12:35:38 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x0, 0x18}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r4, r2, 0x0, 0x26) [ 192.084648][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x141}], 0x10000000000001df, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:35:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x112c86e, &(0x7f0000000380)=ANY=[@ANYBLOB='gid']) [ 192.395541][ T8380] ptrace attach of "/root/syz-executor.5"[8379] was attempted by "/root/syz-executor.5"[8380] 12:35:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 192.561674][ T8386] proc: Bad value for 'gid' [ 192.689460][ T8396] proc: Bad value for 'gid' 12:35:39 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 12:35:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) 12:35:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 193.059682][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 193.071114][ T8415] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.133087][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 193.360876][ T29] audit: type=1800 audit(1590237340.233:2): pid=8368 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15732 res=0 12:35:40 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') sendfile(r0, r1, &(0x7f00000000c0)=0x9, 0xffff) 12:35:40 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x0, 0x18}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r4, r2, 0x0, 0x26) [ 193.601322][ T29] audit: type=1800 audit(1590237340.472:3): pid=8377 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15795 res=0 12:35:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @multicast2}}}}}}, 0x26) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:35:40 executing program 1: pipe(&(0x7f0000000000)) pipe(&(0x7f00000004c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x9) pipe(&(0x7f0000000300)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x1998f04e, 0xffffffff, 0x0, "98cc8ffac2d9798000"}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)={0x0, @remote, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x2c}, 0x2c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) [ 193.721481][ T8427] EXT4-fs (loop1): filesystem is read-only [ 193.742144][ T8427] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 193.817084][ T8427] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 193.899425][ T8427] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 193.936764][ T8427] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (2942!=0) [ 193.979081][ T8427] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 194.001760][ T8427] EXT4-fs (loop1): filesystem is read-only 12:35:40 executing program 0: sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2ac, 0x0, 0x1d, 0x0, 0x118, 0x0, 0x1e4, 0x1fc, 0x1fc, 0x1e4, 0x1fc, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf4, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x11}}, @common=@inet=@tcp={{0x2c, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x308) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x2}) 12:35:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 12:35:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001c000700002395a20a00000007070000", @ANYRES32, @ANYBLOB="d40f66000a000200aa"], 0x42e}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 194.049433][ T8427] EXT4-fs (loop1): orphan cleanup on readonly fs 12:35:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 194.137871][ T8427] EXT4-fs error (device loop1): ext4_quota_enable:5937: comm syz-executor.1: Bad quota inode # 8 [ 194.163864][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.189710][ T8427] EXT4-fs warning (device loop1): ext4_enable_quotas:5974: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. 12:35:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xd1\x05\x13\xf3\r\x17\xf4m\v\v\xda\x7f\xcf\xde\xf7\x1f[~\xa3|?t\xf0I\x00\x80\x00\x00\x00\x00\x00\x00\xdcP@h#~qDK\x91\x17\x93,\xd2\x14\v\x90\xf5\xd3\x91%\f\x9b\xce\x93#\x03JR\x13u\xd8\xfd#\x81\xbaD\xb5\xea\xa2\xca\x9c\x7f\xf6\x01\xb2/\xcc9\x18\x12L\x8c$\xd0\x14V\xec\xcffB\xfd\f\x17{\xefG\xff\r\x05\xf6', 0x200) ftruncate(r0, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000006, 0x13, r0, 0x0) ftruncate(r0, 0x1) [ 194.236938][ T8427] EXT4-fs (loop1): Cannot turn on quotas: error -116 [ 194.268192][ T8427] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 12:35:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x145482) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fbcbab16c80fab, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 12:35:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 12:35:41 executing program 0: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x108, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x108}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 12:35:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 194.939557][ T29] audit: type=1800 audit(1590237341.812:4): pid=8435 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=15786 res=0 12:35:42 executing program 4: [ 195.410759][ T8473] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @multicast2}}}}}}, 0x26) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:35:42 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:42 executing program 1: 12:35:42 executing program 4: 12:35:42 executing program 4: 12:35:42 executing program 1: 12:35:42 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:42 executing program 0: 12:35:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 12:35:42 executing program 4: 12:35:42 executing program 1: 12:35:42 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 195.920863][ T8511] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:43 executing program 3: 12:35:43 executing program 4: 12:35:43 executing program 0: 12:35:43 executing program 1: 12:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:35:43 executing program 0: [ 196.753292][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:43 executing program 3: 12:35:43 executing program 1: 12:35:43 executing program 4: 12:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:43 executing program 3: 12:35:43 executing program 0: 12:35:43 executing program 4: 12:35:43 executing program 1: 12:35:44 executing program 4: 12:35:44 executing program 3: 12:35:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:44 executing program 1: 12:35:44 executing program 0: 12:35:44 executing program 4: 12:35:44 executing program 3: 12:35:44 executing program 1: 12:35:44 executing program 0: [ 197.309664][ T8555] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:44 executing program 4: 12:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:44 executing program 3: 12:35:44 executing program 1: 12:35:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:35:44 executing program 0: 12:35:44 executing program 4: 12:35:44 executing program 3: 12:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:44 executing program 1: 12:35:44 executing program 4: 12:35:44 executing program 0: 12:35:44 executing program 1: 12:35:44 executing program 3: 12:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 197.821033][ T8578] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:44 executing program 4: 12:35:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:45 executing program 0: 12:35:45 executing program 1: 12:35:45 executing program 3: 12:35:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:45 executing program 4: 12:35:45 executing program 3: 12:35:45 executing program 1: 12:35:45 executing program 4: 12:35:45 executing program 0: 12:35:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 198.314308][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:45 executing program 1: 12:35:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:45 executing program 4: 12:35:45 executing program 3: 12:35:45 executing program 0: 12:35:45 executing program 1: 12:35:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:45 executing program 3: 12:35:45 executing program 4: 12:35:45 executing program 1: 12:35:45 executing program 0: 12:35:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 198.787896][ T8617] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:45 executing program 3: 12:35:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:45 executing program 4: 12:35:45 executing program 0: 12:35:45 executing program 1: 12:35:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:45 executing program 3: 12:35:46 executing program 1: 12:35:46 executing program 0: 12:35:46 executing program 3: 12:35:46 executing program 4: 12:35:46 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 199.235723][ T8636] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:46 executing program 4: 12:35:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:46 executing program 0: 12:35:46 executing program 1: 12:35:46 executing program 3: 12:35:46 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:46 executing program 4: 12:35:46 executing program 4: 12:35:46 executing program 1: 12:35:46 executing program 0: 12:35:46 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:46 executing program 3: 12:35:46 executing program 4: 12:35:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:46 executing program 0: 12:35:46 executing program 1: 12:35:46 executing program 3: 12:35:46 executing program 5: mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:46 executing program 4: 12:35:46 executing program 0: 12:35:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32=r1, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:46 executing program 3: 12:35:46 executing program 1: 12:35:46 executing program 4: 12:35:46 executing program 5: mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:47 executing program 1: 12:35:47 executing program 0: 12:35:47 executing program 3: 12:35:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00'}) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:47 executing program 4: 12:35:47 executing program 5: mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:47 executing program 1: 12:35:47 executing program 0: 12:35:47 executing program 3: 12:35:47 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:47 executing program 4: 12:35:47 executing program 3: 12:35:47 executing program 0: 12:35:47 executing program 1: 12:35:47 executing program 4: 12:35:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00'}) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:47 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) 12:35:47 executing program 3: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, 0x0) write(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup2(r3, 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 12:35:47 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 12:35:47 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000404000000000000000000000a000000e4e8f890ee8b6b"], &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) [ 200.808158][ T8713] BPF:[2] CONST (anon) [ 200.826810][ T8717] BPF:[2] CONST (anon) [ 200.841228][ T8713] BPF:type_id=3825205248 12:35:47 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 200.860675][ T8717] BPF:type_id=3825205248 [ 200.877222][ T8713] BPF: [ 200.887425][ T8717] BPF: [ 200.906377][ T8713] BPF:Invalid type_id 12:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)={0x18, r1, 0x703, 0x0, 0x0, {0xf}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:35:47 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)=ANY=[], 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200002, 0x0) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000200)) write(r3, 0x0, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup2(r5, r3) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0xf) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{0x4}, {0x2, 0x1}}, {{0x2}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x48) [ 200.914058][ T8717] BPF:Invalid type_id [ 200.930956][ T8713] BPF: [ 200.930956][ T8713] [ 200.941626][ T8717] BPF: [ 200.941626][ T8717] 12:35:47 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:35:48 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 12:35:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ipvlan1\x00'}) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:35:48 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:35:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:35:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000019500)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:35:48 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:35:48 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 12:35:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:48 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 201.697345][ T8782] ubi0: attaching mtd0 [ 201.714180][ T8782] ubi0: scanning is finished 12:35:48 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 201.750184][ T8782] ubi0: empty MTD device detected [ 201.863712][ T8799] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.899039][ T8782] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) 12:35:48 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 12:35:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 201.910479][ T8782] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 201.977901][ T8782] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 202.028894][ T8782] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 202.056455][ T8782] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 12:35:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 202.089708][ T8782] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 202.133608][ T8782] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3749768059 [ 202.148264][ T8782] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 202.213238][ T8802] ubi0: background thread "ubi_bgt0d" started, PID 8802 [ 202.224284][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:35:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) 12:35:51 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 12:35:51 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) 12:35:51 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:35:51 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$dupfd(r4, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 12:35:51 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000260007007e6a3b52e9d3280000ffff40", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x60}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 204.453884][ T8846] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.465685][ T8848] ubi: mtd0 is already attached to ubi0 12:35:51 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 204.561967][ T8860] ubi0: detaching mtd0 [ 204.611521][ T8860] ================================================================== [ 204.620215][ T8860] BUG: KASAN: use-after-free in uif_close+0x15e/0x190 [ 204.627052][ T8860] Read of size 4 at addr ffff88804e0089e8 by task syz-executor.1/8860 [ 204.635720][ T8860] [ 204.638066][ T8860] CPU: 1 PID: 8860 Comm: syz-executor.1 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 204.648982][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.659566][ T8860] Call Trace: [ 204.662951][ T8860] dump_stack+0x18f/0x20d [ 204.667299][ T8860] ? uif_close+0x15e/0x190 [ 204.671830][ T8860] ? uif_close+0x15e/0x190 [ 204.676478][ T8860] print_address_description.constprop.0.cold+0xd3/0x413 [ 204.684576][ T8860] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 204.691187][ T8860] ? vprintk_func+0x97/0x1a6 [ 204.695774][ T8860] ? uif_close+0x15e/0x190 [ 204.700180][ T8860] kasan_report.cold+0x1f/0x37 [ 204.704947][ T8860] ? uif_close+0x15e/0x190 [ 204.709347][ T8860] uif_close+0x15e/0x190 [ 204.713579][ T8860] ubi_detach_mtd_dev+0x226/0x432 [ 204.718863][ T8860] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 204.723615][ T8860] ? vol_cdev_llseek+0x160/0x160 [ 204.728543][ T8860] ? __x64_sys_futex+0x380/0x4f0 [ 204.733492][ T8860] ? vol_cdev_llseek+0x160/0x160 [ 204.738426][ T8860] ksys_ioctl+0x11a/0x180 [ 204.742856][ T8860] __x64_sys_ioctl+0x6f/0xb0 [ 204.747444][ T8860] do_syscall_64+0xf6/0x7d0 [ 204.752724][ T8860] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 204.758612][ T8860] RIP: 0033:0x45ca29 [ 204.762503][ T8860] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 204.782899][ T8860] RSP: 002b:00007f3aa1932c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.791397][ T8860] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 204.799630][ T8860] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 204.814809][ T8860] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 204.823048][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 204.831094][ T8860] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007f3aa19336d4 [ 204.839069][ T8860] [ 204.841381][ T8860] Allocated by task 8782: [ 204.845704][ T8860] save_stack+0x1b/0x40 [ 204.849839][ T8860] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 204.855449][ T8860] kmem_cache_alloc_trace+0x153/0x7d0 [ 204.860802][ T8860] ubi_attach_mtd_dev+0x2e7/0x27c0 [ 204.865894][ T8860] ctrl_cdev_ioctl+0x229/0x2b0 [ 204.870644][ T8860] ksys_ioctl+0x11a/0x180 [ 204.875223][ T8860] __x64_sys_ioctl+0x6f/0xb0 [ 204.879802][ T8860] do_syscall_64+0xf6/0x7d0 [ 204.884290][ T8860] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 204.890518][ T8860] [ 204.892824][ T8860] Freed by task 8860: [ 204.897493][ T8860] save_stack+0x1b/0x40 [ 204.901800][ T8860] __kasan_slab_free+0xf7/0x140 [ 204.906901][ T8860] kfree+0x109/0x2b0 [ 204.910784][ T8860] device_release+0x71/0x200 [ 204.915709][ T8860] kobject_put+0x1c8/0x2f0 [ 204.920659][ T8860] cdev_device_del+0x69/0x80 [ 204.925237][ T8860] uif_close+0xea/0x190 [ 204.929568][ T8860] ubi_detach_mtd_dev+0x226/0x432 [ 204.934570][ T8860] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 204.939313][ T8860] ksys_ioctl+0x11a/0x180 [ 204.943621][ T8860] __x64_sys_ioctl+0x6f/0xb0 [ 204.948969][ T8860] do_syscall_64+0xf6/0x7d0 [ 204.953549][ T8860] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 204.959448][ T8860] [ 204.962680][ T8860] The buggy address belongs to the object at ffff88804e008000 [ 204.962680][ T8860] which belongs to the cache kmalloc-8k of size 8192 [ 204.977108][ T8860] The buggy address is located 2536 bytes inside of [ 204.977108][ T8860] 8192-byte region [ffff88804e008000, ffff88804e00a000) [ 204.990622][ T8860] The buggy address belongs to the page: [ 204.996696][ T8860] page:ffffea0001380200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea0001380200 order:2 compound_mapcount:0 compound_pincount:0 [ 205.011898][ T8860] flags: 0xfffe0000010200(slab|head) [ 205.018224][ T8860] raw: 00fffe0000010200 ffffea0001491d08 ffffea0001380308 ffff8880aa0021c0 [ 205.026909][ T8860] raw: 0000000000000000 ffff88804e008000 0000000100000001 0000000000000000 [ 205.035659][ T8860] page dumped because: kasan: bad access detected [ 205.042242][ T8860] [ 205.044570][ T8860] Memory state around the buggy address: [ 205.050200][ T8860] ffff88804e008880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 12:35:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 205.058251][ T8860] ffff88804e008900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.066293][ T8860] >ffff88804e008980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.074341][ T8860] ^ [ 205.081787][ T8860] ffff88804e008a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.089830][ T8860] ffff88804e008a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.097988][ T8860] ================================================================== [ 205.106461][ T8860] Disabling lock debugging due to kernel taint 12:35:52 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$dupfd(r4, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 12:35:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='-1', 0x2}], 0x1) [ 205.225168][ T8860] Kernel panic - not syncing: panic_on_warn set ... [ 205.231810][ T8860] CPU: 0 PID: 8860 Comm: syz-executor.1 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 205.242994][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.253762][ T8860] Call Trace: [ 205.257083][ T8860] dump_stack+0x18f/0x20d [ 205.261422][ T8860] ? uif_close+0x110/0x190 [ 205.265846][ T8860] panic+0x2e3/0x75c [ 205.269746][ T8860] ? __warn_printk+0xf3/0xf3 [ 205.274341][ T8860] ? preempt_schedule_common+0x5e/0xc0 [ 205.279931][ T8860] ? uif_close+0x15e/0x190 [ 205.281007][ T8876] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.284460][ T8860] ? uif_close+0x15e/0x190 [ 205.284476][ T8860] ? preempt_schedule_thunk+0x16/0x18 [ 205.284489][ T8860] ? trace_hardirqs_on+0x55/0x230 [ 205.284500][ T8860] ? uif_close+0x15e/0x190 [ 205.284519][ T8860] ? uif_close+0x15e/0x190 [ 205.317976][ T8860] end_report+0x4d/0x53 [ 205.323450][ T8860] kasan_report.cold+0xd/0x37 [ 205.328233][ T8860] ? uif_close+0x15e/0x190 [ 205.333195][ T8860] uif_close+0x15e/0x190 [ 205.337444][ T8860] ubi_detach_mtd_dev+0x226/0x432 [ 205.342474][ T8860] ctrl_cdev_ioctl+0x1bf/0x2b0 [ 205.347472][ T8860] ? vol_cdev_llseek+0x160/0x160 [ 205.352937][ T8860] ? __x64_sys_futex+0x380/0x4f0 [ 205.358370][ T8860] ? vol_cdev_llseek+0x160/0x160 [ 205.364298][ T8860] ksys_ioctl+0x11a/0x180 [ 205.369040][ T8860] __x64_sys_ioctl+0x6f/0xb0 [ 205.373902][ T8860] do_syscall_64+0xf6/0x7d0 [ 205.378420][ T8860] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 205.384321][ T8860] RIP: 0033:0x45ca29 [ 205.388275][ T8860] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.408463][ T8860] RSP: 002b:00007f3aa1932c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.417226][ T8860] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 205.426852][ T8860] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 205.434900][ T8860] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 205.443047][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 205.451542][ T8860] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007f3aa19336d4 [ 205.461338][ T8860] Kernel Offset: disabled [ 205.466102][ T8860] Rebooting in 86400 seconds..