DUID 00:04:06:88:74:a7:04:75:62:cb:55:93:34:09:94:90:e1:fe forked to background, child pid 4655 [ 36.108881][ T4656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.131188][ T4656] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.18' (ECDSA) to the list of known hosts. 2023/01/31 07:15:15 fuzzer started 2023/01/31 07:15:15 dialing manager at 10.128.0.169:42211 syzkaller login: [ 56.281232][ T5086] cgroup: Unknown subsys name 'net' [ 56.395434][ T5086] cgroup: Unknown subsys name 'rlimit' 2023/01/31 07:15:15 syscalls: 3782 2023/01/31 07:15:15 code coverage: enabled 2023/01/31 07:15:15 comparison tracing: enabled 2023/01/31 07:15:15 extra coverage: enabled 2023/01/31 07:15:15 delay kcov mmap: enabled 2023/01/31 07:15:15 setuid sandbox: enabled 2023/01/31 07:15:15 namespace sandbox: enabled 2023/01/31 07:15:15 Android sandbox: /sys/fs/selinux/policy does not exist 2023/01/31 07:15:15 fault injection: enabled 2023/01/31 07:15:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/01/31 07:15:15 net packet injection: enabled 2023/01/31 07:15:15 net device setup: enabled 2023/01/31 07:15:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/01/31 07:15:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/01/31 07:15:15 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/01/31 07:15:15 USB emulation: enabled 2023/01/31 07:15:15 hci packet injection: enabled 2023/01/31 07:15:15 wifi device emulation: enabled 2023/01/31 07:15:15 802.15.4 emulation: enabled 2023/01/31 07:15:15 fetching corpus: 0, signal 0/2000 (executing program) 2023/01/31 07:15:15 fetching corpus: 50, signal 49156/52858 (executing program) 2023/01/31 07:15:16 fetching corpus: 100, signal 73330/78654 (executing program) 2023/01/31 07:15:16 fetching corpus: 149, signal 88295/95212 (executing program) 2023/01/31 07:15:16 fetching corpus: 199, signal 103781/112256 (executing program) 2023/01/31 07:15:16 fetching corpus: 249, signal 112542/122575 (executing program) 2023/01/31 07:15:17 fetching corpus: 299, signal 121645/133213 (executing program) 2023/01/31 07:15:17 fetching corpus: 349, signal 131596/144571 (executing program) 2023/01/31 07:15:17 fetching corpus: 399, signal 141484/155854 (executing program) 2023/01/31 07:15:17 fetching corpus: 449, signal 148422/164181 (executing program) 2023/01/31 07:15:18 fetching corpus: 499, signal 155475/172636 (executing program) 2023/01/31 07:15:18 fetching corpus: 549, signal 167273/185623 (executing program) 2023/01/31 07:15:18 fetching corpus: 598, signal 173177/192837 (executing program) 2023/01/31 07:15:18 fetching corpus: 647, signal 177571/198569 (executing program) 2023/01/31 07:15:18 fetching corpus: 697, signal 185030/207199 (executing program) 2023/01/31 07:15:18 fetching corpus: 747, signal 191997/215354 (executing program) 2023/01/31 07:15:19 fetching corpus: 797, signal 195903/220538 (executing program) 2023/01/31 07:15:19 fetching corpus: 846, signal 202001/227844 (executing program) 2023/01/31 07:15:19 fetching corpus: 896, signal 214815/241393 (executing program) 2023/01/31 07:15:19 fetching corpus: 946, signal 219634/247316 (executing program) 2023/01/31 07:15:20 fetching corpus: 996, signal 226303/254935 (executing program) 2023/01/31 07:15:20 fetching corpus: 1046, signal 232029/261671 (executing program) 2023/01/31 07:15:20 fetching corpus: 1096, signal 235524/266293 (executing program) 2023/01/31 07:15:20 fetching corpus: 1146, signal 238117/270066 (executing program) 2023/01/31 07:15:20 fetching corpus: 1195, signal 242884/275802 (executing program) 2023/01/31 07:15:20 fetching corpus: 1243, signal 246464/280371 (executing program) 2023/01/31 07:15:21 fetching corpus: 1293, signal 250442/285329 (executing program) 2023/01/31 07:15:21 fetching corpus: 1342, signal 254140/290047 (executing program) 2023/01/31 07:15:21 fetching corpus: 1392, signal 258179/294994 (executing program) 2023/01/31 07:15:21 fetching corpus: 1441, signal 261776/299531 (executing program) 2023/01/31 07:15:21 fetching corpus: 1491, signal 264896/303608 (executing program) 2023/01/31 07:15:22 fetching corpus: 1541, signal 267772/307497 (executing program) 2023/01/31 07:15:22 fetching corpus: 1591, signal 271222/311890 (executing program) 2023/01/31 07:15:22 fetching corpus: 1641, signal 274569/316150 (executing program) 2023/01/31 07:15:22 fetching corpus: 1691, signal 278331/320792 (executing program) 2023/01/31 07:15:22 fetching corpus: 1741, signal 281734/325044 (executing program) 2023/01/31 07:15:23 fetching corpus: 1791, signal 285881/329949 (executing program) 2023/01/31 07:15:23 fetching corpus: 1841, signal 288633/333612 (executing program) 2023/01/31 07:15:23 fetching corpus: 1891, signal 290951/336822 (executing program) 2023/01/31 07:15:23 fetching corpus: 1941, signal 294630/341258 (executing program) 2023/01/31 07:15:23 fetching corpus: 1991, signal 297199/344714 (executing program) 2023/01/31 07:15:24 fetching corpus: 2040, signal 301065/349266 (executing program) 2023/01/31 07:15:24 fetching corpus: 2089, signal 303280/352344 (executing program) 2023/01/31 07:15:24 fetching corpus: 2138, signal 306235/356035 (executing program) 2023/01/31 07:15:24 fetching corpus: 2188, signal 308163/358849 (executing program) 2023/01/31 07:15:24 fetching corpus: 2238, signal 311093/362563 (executing program) 2023/01/31 07:15:25 fetching corpus: 2288, signal 313426/365755 (executing program) 2023/01/31 07:15:25 fetching corpus: 2337, signal 316623/369642 (executing program) 2023/01/31 07:15:25 fetching corpus: 2387, signal 320185/373838 (executing program) 2023/01/31 07:15:25 fetching corpus: 2437, signal 322156/376656 (executing program) 2023/01/31 07:15:26 fetching corpus: 2487, signal 325308/380458 (executing program) 2023/01/31 07:15:26 fetching corpus: 2535, signal 328438/384239 (executing program) 2023/01/31 07:15:26 fetching corpus: 2585, signal 332281/388610 (executing program) 2023/01/31 07:15:26 fetching corpus: 2635, signal 334707/391736 (executing program) 2023/01/31 07:15:27 fetching corpus: 2685, signal 336677/394433 (executing program) 2023/01/31 07:15:27 fetching corpus: 2735, signal 338087/396678 (executing program) 2023/01/31 07:15:27 fetching corpus: 2783, signal 341247/400324 (executing program) 2023/01/31 07:15:27 fetching corpus: 2833, signal 343661/403422 (executing program) 2023/01/31 07:15:27 fetching corpus: 2883, signal 345319/405792 (executing program) 2023/01/31 07:15:28 fetching corpus: 2933, signal 347008/408190 (executing program) 2023/01/31 07:15:28 fetching corpus: 2983, signal 348245/410246 (executing program) 2023/01/31 07:15:28 fetching corpus: 3033, signal 349705/412469 (executing program) 2023/01/31 07:15:28 fetching corpus: 3083, signal 351409/414864 (executing program) 2023/01/31 07:15:28 fetching corpus: 3132, signal 353581/417664 (executing program) 2023/01/31 07:15:28 fetching corpus: 3181, signal 355577/420281 (executing program) 2023/01/31 07:15:29 fetching corpus: 3231, signal 356693/422162 (executing program) 2023/01/31 07:15:29 fetching corpus: 3281, signal 358686/424789 (executing program) 2023/01/31 07:15:29 fetching corpus: 3331, signal 361121/427741 (executing program) 2023/01/31 07:15:29 fetching corpus: 3381, signal 362769/430074 (executing program) 2023/01/31 07:15:29 fetching corpus: 3431, signal 364629/432517 (executing program) 2023/01/31 07:15:30 fetching corpus: 3480, signal 366522/434999 (executing program) 2023/01/31 07:15:30 fetching corpus: 3530, signal 368407/437466 (executing program) [ 71.221524][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228032][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 2023/01/31 07:15:30 fetching corpus: 3578, signal 369845/439535 (executing program) 2023/01/31 07:15:30 fetching corpus: 3628, signal 371193/441548 (executing program) 2023/01/31 07:15:30 fetching corpus: 3677, signal 372942/443889 (executing program) 2023/01/31 07:15:31 fetching corpus: 3727, signal 374986/446457 (executing program) 2023/01/31 07:15:31 fetching corpus: 3777, signal 376629/448723 (executing program) 2023/01/31 07:15:31 fetching corpus: 3827, signal 379153/451594 (executing program) 2023/01/31 07:15:31 fetching corpus: 3877, signal 380899/453869 (executing program) 2023/01/31 07:15:31 fetching corpus: 3927, signal 382165/455769 (executing program) 2023/01/31 07:15:32 fetching corpus: 3976, signal 384115/458136 (executing program) 2023/01/31 07:15:32 fetching corpus: 4026, signal 385708/460251 (executing program) 2023/01/31 07:15:32 fetching corpus: 4076, signal 387742/462733 (executing program) 2023/01/31 07:15:32 fetching corpus: 4126, signal 389388/464842 (executing program) 2023/01/31 07:15:32 fetching corpus: 4175, signal 390519/466623 (executing program) 2023/01/31 07:15:33 fetching corpus: 4224, signal 392466/469001 (executing program) 2023/01/31 07:15:33 fetching corpus: 4273, signal 394762/471608 (executing program) 2023/01/31 07:15:33 fetching corpus: 4323, signal 397256/474366 (executing program) 2023/01/31 07:15:33 fetching corpus: 4373, signal 398394/476082 (executing program) 2023/01/31 07:15:33 fetching corpus: 4423, signal 400695/478675 (executing program) 2023/01/31 07:15:34 fetching corpus: 4473, signal 401978/480474 (executing program) 2023/01/31 07:15:34 fetching corpus: 4522, signal 403536/482469 (executing program) 2023/01/31 07:15:34 fetching corpus: 4570, signal 405565/484853 (executing program) 2023/01/31 07:15:34 fetching corpus: 4620, signal 406955/486735 (executing program) 2023/01/31 07:15:35 fetching corpus: 4670, signal 407933/488298 (executing program) 2023/01/31 07:15:35 fetching corpus: 4720, signal 409645/490418 (executing program) 2023/01/31 07:15:35 fetching corpus: 4770, signal 411356/492485 (executing program) [ 76.341691][ T1131] cfg80211: failed to load regulatory.db 2023/01/31 07:15:35 fetching corpus: 4820, signal 412654/494284 (executing program) 2023/01/31 07:15:35 fetching corpus: 4870, signal 414155/496212 (executing program) 2023/01/31 07:15:36 fetching corpus: 4920, signal 416212/498542 (executing program) 2023/01/31 07:15:36 fetching corpus: 4970, signal 417144/500012 (executing program) 2023/01/31 07:15:36 fetching corpus: 5020, signal 419038/502196 (executing program) 2023/01/31 07:15:36 fetching corpus: 5070, signal 425417/507547 (executing program) 2023/01/31 07:15:36 fetching corpus: 5120, signal 427457/509724 (executing program) 2023/01/31 07:15:37 fetching corpus: 5170, signal 428720/511432 (executing program) 2023/01/31 07:15:37 fetching corpus: 5220, signal 429984/513110 (executing program) 2023/01/31 07:15:37 fetching corpus: 5269, signal 431440/514912 (executing program) 2023/01/31 07:15:37 fetching corpus: 5319, signal 432555/516508 (executing program) 2023/01/31 07:15:38 fetching corpus: 5369, signal 434112/518351 (executing program) 2023/01/31 07:15:38 fetching corpus: 5418, signal 435353/519993 (executing program) 2023/01/31 07:15:38 fetching corpus: 5467, signal 436730/521773 (executing program) 2023/01/31 07:15:38 fetching corpus: 5516, signal 438201/523523 (executing program) 2023/01/31 07:15:38 fetching corpus: 5564, signal 439421/525087 (executing program) 2023/01/31 07:15:39 fetching corpus: 5614, signal 441005/526894 (executing program) 2023/01/31 07:15:39 fetching corpus: 5663, signal 442207/528479 (executing program) 2023/01/31 07:15:39 fetching corpus: 5713, signal 443380/530052 (executing program) 2023/01/31 07:15:39 fetching corpus: 5762, signal 444648/531667 (executing program) 2023/01/31 07:15:39 fetching corpus: 5812, signal 446005/533331 (executing program) 2023/01/31 07:15:40 fetching corpus: 5862, signal 446997/534700 (executing program) 2023/01/31 07:15:40 fetching corpus: 5912, signal 448197/536247 (executing program) 2023/01/31 07:15:40 fetching corpus: 5962, signal 449598/537945 (executing program) 2023/01/31 07:15:40 fetching corpus: 6011, signal 450500/539303 (executing program) 2023/01/31 07:15:40 fetching corpus: 6060, signal 452178/541148 (executing program) 2023/01/31 07:15:41 fetching corpus: 6110, signal 453032/542430 (executing program) 2023/01/31 07:15:41 fetching corpus: 6160, signal 454728/544189 (executing program) 2023/01/31 07:15:41 fetching corpus: 6210, signal 456131/545835 (executing program) 2023/01/31 07:15:41 fetching corpus: 6260, signal 457415/547399 (executing program) 2023/01/31 07:15:42 fetching corpus: 6310, signal 458672/548895 (executing program) 2023/01/31 07:15:42 fetching corpus: 6360, signal 460103/550523 (executing program) 2023/01/31 07:15:42 fetching corpus: 6410, signal 461169/551858 (executing program) 2023/01/31 07:15:42 fetching corpus: 6460, signal 462590/553445 (executing program) 2023/01/31 07:15:42 fetching corpus: 6510, signal 463607/554804 (executing program) 2023/01/31 07:15:42 fetching corpus: 6559, signal 464768/556230 (executing program) 2023/01/31 07:15:43 fetching corpus: 6609, signal 465726/557501 (executing program) 2023/01/31 07:15:43 fetching corpus: 6659, signal 467028/558972 (executing program) 2023/01/31 07:15:43 fetching corpus: 6709, signal 468410/560407 (executing program) 2023/01/31 07:15:43 fetching corpus: 6759, signal 469927/562071 (executing program) 2023/01/31 07:15:43 fetching corpus: 6808, signal 470996/563397 (executing program) 2023/01/31 07:15:43 fetching corpus: 6858, signal 472276/564812 (executing program) 2023/01/31 07:15:44 fetching corpus: 6908, signal 473165/566020 (executing program) 2023/01/31 07:15:44 fetching corpus: 6958, signal 474403/567424 (executing program) 2023/01/31 07:15:44 fetching corpus: 7008, signal 475296/568618 (executing program) 2023/01/31 07:15:44 fetching corpus: 7057, signal 475996/569695 (executing program) 2023/01/31 07:15:45 fetching corpus: 7107, signal 477058/570980 (executing program) 2023/01/31 07:15:45 fetching corpus: 7157, signal 478263/572323 (executing program) 2023/01/31 07:15:45 fetching corpus: 7207, signal 479561/573732 (executing program) 2023/01/31 07:15:45 fetching corpus: 7257, signal 480452/574929 (executing program) 2023/01/31 07:15:45 fetching corpus: 7306, signal 481158/575982 (executing program) 2023/01/31 07:15:46 fetching corpus: 7356, signal 482130/577200 (executing program) 2023/01/31 07:15:46 fetching corpus: 7405, signal 483044/578391 (executing program) 2023/01/31 07:15:46 fetching corpus: 7455, signal 484663/579937 (executing program) 2023/01/31 07:15:46 fetching corpus: 7505, signal 485613/581123 (executing program) 2023/01/31 07:15:46 fetching corpus: 7555, signal 487035/582580 (executing program) 2023/01/31 07:15:47 fetching corpus: 7605, signal 488046/583797 (executing program) 2023/01/31 07:15:47 fetching corpus: 7655, signal 488802/584861 (executing program) 2023/01/31 07:15:47 fetching corpus: 7701, signal 490120/586238 (executing program) 2023/01/31 07:15:47 fetching corpus: 7751, signal 491550/587607 (executing program) 2023/01/31 07:15:47 fetching corpus: 7801, signal 492716/588898 (executing program) 2023/01/31 07:15:48 fetching corpus: 7851, signal 493379/589858 (executing program) 2023/01/31 07:15:48 fetching corpus: 7901, signal 495030/591357 (executing program) 2023/01/31 07:15:48 fetching corpus: 7951, signal 496371/592699 (executing program) 2023/01/31 07:15:48 fetching corpus: 8001, signal 497255/593769 (executing program) 2023/01/31 07:15:49 fetching corpus: 8051, signal 498418/595009 (executing program) 2023/01/31 07:15:49 fetching corpus: 8101, signal 499835/596377 (executing program) 2023/01/31 07:15:49 fetching corpus: 8151, signal 501187/597668 (executing program) 2023/01/31 07:15:49 fetching corpus: 8199, signal 502335/598869 (executing program) 2023/01/31 07:15:49 fetching corpus: 8249, signal 503307/599965 (executing program) 2023/01/31 07:15:50 fetching corpus: 8299, signal 504066/600945 (executing program) 2023/01/31 07:15:50 fetching corpus: 8348, signal 505146/602095 (executing program) 2023/01/31 07:15:50 fetching corpus: 8398, signal 507077/603712 (executing program) 2023/01/31 07:15:50 fetching corpus: 8447, signal 508406/604935 (executing program) 2023/01/31 07:15:50 fetching corpus: 8497, signal 509548/606061 (executing program) 2023/01/31 07:15:51 fetching corpus: 8547, signal 510993/607380 (executing program) 2023/01/31 07:15:51 fetching corpus: 8597, signal 511637/608286 (executing program) 2023/01/31 07:15:51 fetching corpus: 8647, signal 512193/609116 (executing program) 2023/01/31 07:15:51 fetching corpus: 8697, signal 512960/610098 (executing program) 2023/01/31 07:15:51 fetching corpus: 8747, signal 514027/611195 (executing program) 2023/01/31 07:15:51 fetching corpus: 8797, signal 515063/612250 (executing program) 2023/01/31 07:15:52 fetching corpus: 8847, signal 515950/613233 (executing program) 2023/01/31 07:15:52 fetching corpus: 8895, signal 517449/614517 (executing program) 2023/01/31 07:15:52 fetching corpus: 8944, signal 518172/615419 (executing program) 2023/01/31 07:15:52 fetching corpus: 8993, signal 519447/616541 (executing program) 2023/01/31 07:15:52 fetching corpus: 9043, signal 520026/617377 (executing program) 2023/01/31 07:15:52 fetching corpus: 9093, signal 521079/618436 (executing program) 2023/01/31 07:15:52 fetching corpus: 9143, signal 521876/619344 (executing program) 2023/01/31 07:15:53 fetching corpus: 9192, signal 523144/620446 (executing program) 2023/01/31 07:15:53 fetching corpus: 9242, signal 524092/621402 (executing program) 2023/01/31 07:15:53 fetching corpus: 9292, signal 525149/622396 (executing program) 2023/01/31 07:15:53 fetching corpus: 9341, signal 525679/623147 (executing program) 2023/01/31 07:15:53 fetching corpus: 9391, signal 526745/624087 (executing program) 2023/01/31 07:15:54 fetching corpus: 9439, signal 527658/625013 (executing program) 2023/01/31 07:15:54 fetching corpus: 9488, signal 528428/625835 (executing program) 2023/01/31 07:15:54 fetching corpus: 9537, signal 529655/626900 (executing program) 2023/01/31 07:15:54 fetching corpus: 9587, signal 533389/629094 (executing program) 2023/01/31 07:15:54 fetching corpus: 9634, signal 534481/630141 (executing program) 2023/01/31 07:15:55 fetching corpus: 9684, signal 535458/631079 (executing program) 2023/01/31 07:15:55 fetching corpus: 9733, signal 536267/631929 (executing program) 2023/01/31 07:15:55 fetching corpus: 9783, signal 537465/632958 (executing program) 2023/01/31 07:15:55 fetching corpus: 9831, signal 538125/633730 (executing program) 2023/01/31 07:15:55 fetching corpus: 9881, signal 538836/634497 (executing program) 2023/01/31 07:15:56 fetching corpus: 9929, signal 540299/635586 (executing program) 2023/01/31 07:15:56 fetching corpus: 9979, signal 541032/636367 (executing program) 2023/01/31 07:15:56 fetching corpus: 10029, signal 542302/637386 (executing program) 2023/01/31 07:15:56 fetching corpus: 10079, signal 543047/638199 (executing program) 2023/01/31 07:15:56 fetching corpus: 10129, signal 544889/639415 (executing program) 2023/01/31 07:15:57 fetching corpus: 10178, signal 545709/640235 (executing program) 2023/01/31 07:15:57 fetching corpus: 10225, signal 546623/641077 (executing program) 2023/01/31 07:15:57 fetching corpus: 10275, signal 547539/641927 (executing program) 2023/01/31 07:15:57 fetching corpus: 10324, signal 548534/642759 (executing program) 2023/01/31 07:15:58 fetching corpus: 10373, signal 549113/643474 (executing program) 2023/01/31 07:15:58 fetching corpus: 10423, signal 550440/644470 (executing program) 2023/01/31 07:15:58 fetching corpus: 10472, signal 551138/645205 (executing program) 2023/01/31 07:15:58 fetching corpus: 10520, signal 552246/646091 (executing program) 2023/01/31 07:15:58 fetching corpus: 10569, signal 552871/646771 (executing program) 2023/01/31 07:15:59 fetching corpus: 10619, signal 553728/647516 (executing program) 2023/01/31 07:15:59 fetching corpus: 10669, signal 554767/648347 (executing program) 2023/01/31 07:15:59 fetching corpus: 10718, signal 555730/649163 (executing program) 2023/01/31 07:15:59 fetching corpus: 10766, signal 556711/649960 (executing program) 2023/01/31 07:15:59 fetching corpus: 10816, signal 557291/650644 (executing program) 2023/01/31 07:15:59 fetching corpus: 10865, signal 557934/651303 (executing program) 2023/01/31 07:16:00 fetching corpus: 10914, signal 558708/652055 (executing program) 2023/01/31 07:16:00 fetching corpus: 10964, signal 559619/652866 (executing program) 2023/01/31 07:16:00 fetching corpus: 11014, signal 560743/653692 (executing program) 2023/01/31 07:16:00 fetching corpus: 11064, signal 561559/654420 (executing program) 2023/01/31 07:16:00 fetching corpus: 11114, signal 562482/655181 (executing program) 2023/01/31 07:16:01 fetching corpus: 11164, signal 563438/655934 (executing program) 2023/01/31 07:16:01 fetching corpus: 11212, signal 563903/656498 (executing program) 2023/01/31 07:16:01 fetching corpus: 11262, signal 564612/657163 (executing program) 2023/01/31 07:16:01 fetching corpus: 11311, signal 565381/657844 (executing program) 2023/01/31 07:16:01 fetching corpus: 11361, signal 566309/658554 (executing program) 2023/01/31 07:16:02 fetching corpus: 11411, signal 567026/659189 (executing program) 2023/01/31 07:16:02 fetching corpus: 11461, signal 567658/659809 (executing program) 2023/01/31 07:16:02 fetching corpus: 11511, signal 568676/660561 (executing program) 2023/01/31 07:16:02 fetching corpus: 11561, signal 569316/661168 (executing program) 2023/01/31 07:16:02 fetching corpus: 11610, signal 569893/661753 (executing program) 2023/01/31 07:16:03 fetching corpus: 11659, signal 570497/662343 (executing program) 2023/01/31 07:16:03 fetching corpus: 11709, signal 571245/662970 (executing program) 2023/01/31 07:16:03 fetching corpus: 11759, signal 571781/663576 (executing program) 2023/01/31 07:16:03 fetching corpus: 11809, signal 572713/664265 (executing program) 2023/01/31 07:16:03 fetching corpus: 11859, signal 573449/664913 (executing program) 2023/01/31 07:16:03 fetching corpus: 11909, signal 574419/665589 (executing program) 2023/01/31 07:16:04 fetching corpus: 11959, signal 575007/666136 (executing program) 2023/01/31 07:16:04 fetching corpus: 12009, signal 575733/666798 (executing program) 2023/01/31 07:16:04 fetching corpus: 12059, signal 576535/667399 (executing program) 2023/01/31 07:16:04 fetching corpus: 12107, signal 577162/667956 (executing program) 2023/01/31 07:16:04 fetching corpus: 12157, signal 577846/668538 (executing program) 2023/01/31 07:16:04 fetching corpus: 12205, signal 578580/669137 (executing program) 2023/01/31 07:16:05 fetching corpus: 12255, signal 579498/669771 (executing program) 2023/01/31 07:16:05 fetching corpus: 12303, signal 580303/670378 (executing program) 2023/01/31 07:16:05 fetching corpus: 12353, signal 581021/670923 (executing program) 2023/01/31 07:16:05 fetching corpus: 12403, signal 581945/671583 (executing program) 2023/01/31 07:16:05 fetching corpus: 12452, signal 582661/672156 (executing program) 2023/01/31 07:16:06 fetching corpus: 12502, signal 583442/672727 (executing program) 2023/01/31 07:16:06 fetching corpus: 12552, signal 584211/673317 (executing program) 2023/01/31 07:16:06 fetching corpus: 12602, signal 584914/673895 (executing program) 2023/01/31 07:16:06 fetching corpus: 12652, signal 585659/674472 (executing program) 2023/01/31 07:16:06 fetching corpus: 12702, signal 586247/674990 (executing program) 2023/01/31 07:16:07 fetching corpus: 12752, signal 586781/675449 (executing program) 2023/01/31 07:16:07 fetching corpus: 12802, signal 588500/676254 (executing program) 2023/01/31 07:16:07 fetching corpus: 12852, signal 589122/676771 (executing program) 2023/01/31 07:16:07 fetching corpus: 12902, signal 589860/677313 (executing program) 2023/01/31 07:16:08 fetching corpus: 12952, signal 590719/677883 (executing program) 2023/01/31 07:16:08 fetching corpus: 13002, signal 591433/678435 (executing program) 2023/01/31 07:16:08 fetching corpus: 13052, signal 593758/679352 (executing program) 2023/01/31 07:16:08 fetching corpus: 13101, signal 594675/679898 (executing program) 2023/01/31 07:16:08 fetching corpus: 13151, signal 595248/680390 (executing program) 2023/01/31 07:16:08 fetching corpus: 13201, signal 595794/680863 (executing program) 2023/01/31 07:16:09 fetching corpus: 13251, signal 596355/681349 (executing program) 2023/01/31 07:16:09 fetching corpus: 13301, signal 597061/681806 (executing program) 2023/01/31 07:16:09 fetching corpus: 13351, signal 597616/682295 (executing program) 2023/01/31 07:16:09 fetching corpus: 13401, signal 599085/682953 (executing program) 2023/01/31 07:16:09 fetching corpus: 13450, signal 599752/683428 (executing program) 2023/01/31 07:16:10 fetching corpus: 13500, signal 600290/683843 (executing program) 2023/01/31 07:16:10 fetching corpus: 13549, signal 601088/684316 (executing program) 2023/01/31 07:16:10 fetching corpus: 13597, signal 602391/684920 (executing program) 2023/01/31 07:16:10 fetching corpus: 13647, signal 603278/685439 (executing program) 2023/01/31 07:16:10 fetching corpus: 13697, signal 603974/685920 (executing program) 2023/01/31 07:16:10 fetching corpus: 13747, signal 604798/686381 (executing program) 2023/01/31 07:16:11 fetching corpus: 13797, signal 605241/686792 (executing program) 2023/01/31 07:16:11 fetching corpus: 13846, signal 606010/687226 (executing program) 2023/01/31 07:16:11 fetching corpus: 13895, signal 606966/687727 (executing program) 2023/01/31 07:16:11 fetching corpus: 13945, signal 607481/688117 (executing program) 2023/01/31 07:16:12 fetching corpus: 13994, signal 608081/688520 (executing program) 2023/01/31 07:16:12 fetching corpus: 14044, signal 608830/688990 (executing program) 2023/01/31 07:16:12 fetching corpus: 14094, signal 609672/689443 (executing program) 2023/01/31 07:16:12 fetching corpus: 14144, signal 610383/689886 (executing program) 2023/01/31 07:16:13 fetching corpus: 14194, signal 611092/690296 (executing program) 2023/01/31 07:16:13 fetching corpus: 14244, signal 611952/690750 (executing program) 2023/01/31 07:16:13 fetching corpus: 14294, signal 612375/691086 (executing program) 2023/01/31 07:16:13 fetching corpus: 14344, signal 612982/691499 (executing program) 2023/01/31 07:16:13 fetching corpus: 14394, signal 613704/691913 (executing program) 2023/01/31 07:16:14 fetching corpus: 14444, signal 614323/692275 (executing program) 2023/01/31 07:16:14 fetching corpus: 14494, signal 614897/692622 (executing program) 2023/01/31 07:16:14 fetching corpus: 14544, signal 615565/692989 (executing program) 2023/01/31 07:16:14 fetching corpus: 14594, signal 616174/693342 (executing program) 2023/01/31 07:16:15 fetching corpus: 14644, signal 616690/693717 (executing program) 2023/01/31 07:16:15 fetching corpus: 14692, signal 617336/694107 (executing program) 2023/01/31 07:16:15 fetching corpus: 14742, signal 618208/694496 (executing program) 2023/01/31 07:16:15 fetching corpus: 14789, signal 618823/694877 (executing program) 2023/01/31 07:16:15 fetching corpus: 14838, signal 619454/695223 (executing program) 2023/01/31 07:16:15 fetching corpus: 14886, signal 620105/695584 (executing program) 2023/01/31 07:16:16 fetching corpus: 14936, signal 620793/695946 (executing program) 2023/01/31 07:16:16 fetching corpus: 14984, signal 621467/696301 (executing program) 2023/01/31 07:16:16 fetching corpus: 15033, signal 621832/696609 (executing program) 2023/01/31 07:16:16 fetching corpus: 15082, signal 622598/696964 (executing program) 2023/01/31 07:16:17 fetching corpus: 15129, signal 623386/697317 (executing program) 2023/01/31 07:16:17 fetching corpus: 15179, signal 624027/697649 (executing program) 2023/01/31 07:16:17 fetching corpus: 15229, signal 624819/697966 (executing program) 2023/01/31 07:16:17 fetching corpus: 15279, signal 625840/698343 (executing program) 2023/01/31 07:16:18 fetching corpus: 15325, signal 626617/698686 (executing program) 2023/01/31 07:16:18 fetching corpus: 15375, signal 627146/698966 (executing program) 2023/01/31 07:16:18 fetching corpus: 15425, signal 627805/699242 (executing program) 2023/01/31 07:16:18 fetching corpus: 15475, signal 628204/699517 (executing program) 2023/01/31 07:16:18 fetching corpus: 15524, signal 629135/699856 (executing program) 2023/01/31 07:16:19 fetching corpus: 15574, signal 629764/700147 (executing program) 2023/01/31 07:16:19 fetching corpus: 15622, signal 630221/700418 (executing program) 2023/01/31 07:16:19 fetching corpus: 15672, signal 630941/700714 (executing program) 2023/01/31 07:16:19 fetching corpus: 15721, signal 631439/700993 (executing program) 2023/01/31 07:16:19 fetching corpus: 15771, signal 631898/701265 (executing program) 2023/01/31 07:16:19 fetching corpus: 15821, signal 632403/701545 (executing program) 2023/01/31 07:16:20 fetching corpus: 15871, signal 633231/701819 (executing program) 2023/01/31 07:16:20 fetching corpus: 15919, signal 633750/702100 (executing program) 2023/01/31 07:16:20 fetching corpus: 15967, signal 634119/702326 (executing program) 2023/01/31 07:16:20 fetching corpus: 16017, signal 634636/702567 (executing program) 2023/01/31 07:16:20 fetching corpus: 16066, signal 636132/702900 (executing program) 2023/01/31 07:16:21 fetching corpus: 16116, signal 636736/703141 (executing program) 2023/01/31 07:16:21 fetching corpus: 16166, signal 637145/703378 (executing program) 2023/01/31 07:16:21 fetching corpus: 16215, signal 637677/703654 (executing program) 2023/01/31 07:16:21 fetching corpus: 16265, signal 638306/703914 (executing program) 2023/01/31 07:16:21 fetching corpus: 16315, signal 638661/704146 (executing program) 2023/01/31 07:16:21 fetching corpus: 16364, signal 639238/704375 (executing program) 2023/01/31 07:16:22 fetching corpus: 16414, signal 639889/704618 (executing program) 2023/01/31 07:16:22 fetching corpus: 16463, signal 640479/704826 (executing program) 2023/01/31 07:16:22 fetching corpus: 16513, signal 641017/705061 (executing program) 2023/01/31 07:16:22 fetching corpus: 16563, signal 641561/705281 (executing program) 2023/01/31 07:16:23 fetching corpus: 16613, signal 642542/705544 (executing program) 2023/01/31 07:16:23 fetching corpus: 16662, signal 643269/706018 (executing program) 2023/01/31 07:16:23 fetching corpus: 16712, signal 643745/706213 (executing program) 2023/01/31 07:16:23 fetching corpus: 16761, signal 644323/706414 (executing program) 2023/01/31 07:16:23 fetching corpus: 16811, signal 644999/706628 (executing program) 2023/01/31 07:16:23 fetching corpus: 16860, signal 645625/706904 (executing program) 2023/01/31 07:16:24 fetching corpus: 16910, signal 646103/707152 (executing program) 2023/01/31 07:16:24 fetching corpus: 16960, signal 647039/707374 (executing program) 2023/01/31 07:16:24 fetching corpus: 17010, signal 647427/707561 (executing program) 2023/01/31 07:16:24 fetching corpus: 17060, signal 647844/707762 (executing program) 2023/01/31 07:16:24 fetching corpus: 17109, signal 648592/707942 (executing program) 2023/01/31 07:16:25 fetching corpus: 17159, signal 649307/708134 (executing program) 2023/01/31 07:16:25 fetching corpus: 17207, signal 649775/708298 (executing program) 2023/01/31 07:16:25 fetching corpus: 17255, signal 650515/708457 (executing program) 2023/01/31 07:16:25 fetching corpus: 17305, signal 651088/708639 (executing program) 2023/01/31 07:16:25 fetching corpus: 17353, signal 651692/708817 (executing program) 2023/01/31 07:16:26 fetching corpus: 17403, signal 652488/709004 (executing program) 2023/01/31 07:16:26 fetching corpus: 17453, signal 652870/709184 (executing program) 2023/01/31 07:16:26 fetching corpus: 17503, signal 653561/709352 (executing program) 2023/01/31 07:16:26 fetching corpus: 17552, signal 653991/709486 (executing program) 2023/01/31 07:16:26 fetching corpus: 17602, signal 654558/709486 (executing program) 2023/01/31 07:16:26 fetching corpus: 17652, signal 654963/709487 (executing program) 2023/01/31 07:16:27 fetching corpus: 17702, signal 655565/709487 (executing program) 2023/01/31 07:16:27 fetching corpus: 17752, signal 657439/709487 (executing program) 2023/01/31 07:16:27 fetching corpus: 17802, signal 657942/709553 (executing program) 2023/01/31 07:16:27 fetching corpus: 17852, signal 658867/709553 (executing program) 2023/01/31 07:16:27 fetching corpus: 17900, signal 659247/709553 (executing program) 2023/01/31 07:16:28 fetching corpus: 17950, signal 659732/709553 (executing program) 2023/01/31 07:16:28 fetching corpus: 18000, signal 660232/709553 (executing program) 2023/01/31 07:16:28 fetching corpus: 18050, signal 660599/709553 (executing program) 2023/01/31 07:16:28 fetching corpus: 18100, signal 661127/709555 (executing program) 2023/01/31 07:16:28 fetching corpus: 18150, signal 661605/709555 (executing program) 2023/01/31 07:16:29 fetching corpus: 18200, signal 661880/709561 (executing program) 2023/01/31 07:16:29 fetching corpus: 18249, signal 662357/709564 (executing program) 2023/01/31 07:16:29 fetching corpus: 18299, signal 663018/709566 (executing program) 2023/01/31 07:16:29 fetching corpus: 18349, signal 663724/709568 (executing program) 2023/01/31 07:16:29 fetching corpus: 18399, signal 664452/709568 (executing program) 2023/01/31 07:16:30 fetching corpus: 18448, signal 665404/709601 (executing program) 2023/01/31 07:16:30 fetching corpus: 18498, signal 665795/709603 (executing program) 2023/01/31 07:16:30 fetching corpus: 18548, signal 666421/709616 (executing program) 2023/01/31 07:16:30 fetching corpus: 18597, signal 667010/709616 (executing program) 2023/01/31 07:16:30 fetching corpus: 18647, signal 667444/709616 (executing program) 2023/01/31 07:16:30 fetching corpus: 18697, signal 667860/709627 (executing program) 2023/01/31 07:16:31 fetching corpus: 18746, signal 668400/709627 (executing program) 2023/01/31 07:16:31 fetching corpus: 18796, signal 668748/709634 (executing program) 2023/01/31 07:16:31 fetching corpus: 18845, signal 669561/709634 (executing program) 2023/01/31 07:16:31 fetching corpus: 18894, signal 669994/709665 (executing program) [ 132.659928][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.666302][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 2023/01/31 07:16:32 fetching corpus: 18942, signal 670705/709674 (executing program) 2023/01/31 07:16:32 fetching corpus: 18992, signal 671316/709677 (executing program) 2023/01/31 07:16:32 fetching corpus: 19042, signal 671675/709677 (executing program) 2023/01/31 07:16:32 fetching corpus: 19092, signal 672575/709677 (executing program) 2023/01/31 07:16:32 fetching corpus: 19142, signal 673008/709677 (executing program) 2023/01/31 07:16:32 fetching corpus: 19191, signal 673529/709677 (executing program) 2023/01/31 07:16:33 fetching corpus: 19241, signal 674237/709687 (executing program) 2023/01/31 07:16:33 fetching corpus: 19291, signal 675132/709688 (executing program) 2023/01/31 07:16:33 fetching corpus: 19341, signal 675611/709734 (executing program) 2023/01/31 07:16:33 fetching corpus: 19390, signal 676074/709752 (executing program) 2023/01/31 07:16:33 fetching corpus: 19439, signal 676394/709752 (executing program) 2023/01/31 07:16:34 fetching corpus: 19489, signal 676760/709752 (executing program) 2023/01/31 07:16:34 fetching corpus: 19539, signal 677205/709764 (executing program) 2023/01/31 07:16:34 fetching corpus: 19589, signal 677561/709764 (executing program) 2023/01/31 07:16:34 fetching corpus: 19639, signal 678232/709773 (executing program) 2023/01/31 07:16:35 fetching corpus: 19688, signal 678895/709773 (executing program) 2023/01/31 07:16:35 fetching corpus: 19738, signal 679648/709773 (executing program) 2023/01/31 07:16:35 fetching corpus: 19788, signal 680202/709804 (executing program) 2023/01/31 07:16:35 fetching corpus: 19837, signal 680558/709804 (executing program) 2023/01/31 07:16:35 fetching corpus: 19887, signal 681095/709804 (executing program) 2023/01/31 07:16:35 fetching corpus: 19934, signal 681488/709804 (executing program) 2023/01/31 07:16:36 fetching corpus: 19983, signal 682117/709804 (executing program) 2023/01/31 07:16:36 fetching corpus: 20033, signal 684960/709804 (executing program) 2023/01/31 07:16:36 fetching corpus: 20083, signal 685458/709804 (executing program) 2023/01/31 07:16:36 fetching corpus: 20133, signal 685921/709804 (executing program) 2023/01/31 07:16:36 fetching corpus: 20179, signal 686369/709815 (executing program) 2023/01/31 07:16:36 fetching corpus: 20182, signal 686380/709819 (executing program) 2023/01/31 07:16:36 fetching corpus: 20182, signal 686380/709819 (executing program) 2023/01/31 07:16:39 starting 6 fuzzer processes 07:16:39 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10120, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x6000000000000000}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) 07:16:39 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellinkprop={0xd8, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8100, 0x88}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xce}, @IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7b}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7fffffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xc6}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x76}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "f4ea3e1fe56449c4c83f"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000054}, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) 07:16:39 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffd67}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 07:16:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:16:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) 07:16:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 140.456735][ T5082] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5082 'syz-fuzzer' [ 141.010133][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.019175][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.026856][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.033750][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.035649][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.054121][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.061625][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.071867][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.074834][ T5130] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.079289][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.086290][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.095333][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.100652][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.108335][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.123781][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.123961][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.150451][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 141.156304][ T5135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.157765][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.183495][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.192531][ T5135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.197100][ T5133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.200443][ T5135] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.215348][ T4398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.221977][ T5135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.224556][ T4398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.237539][ T4398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.246627][ T4398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.247411][ T5135] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.264395][ T5135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.281859][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.297047][ T5135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.315850][ T5135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.323966][ T5135] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.332238][ T5135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.736652][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 141.787474][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 141.846131][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 142.019467][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 142.041257][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.049088][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.056987][ T5128] device bridge_slave_0 entered promiscuous mode [ 142.072004][ T5131] chnl_net:caif_netlink_parms(): no params data found [ 142.085297][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 142.106942][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.114196][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.122579][ T5128] device bridge_slave_1 entered promiscuous mode [ 142.130336][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.137414][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.146825][ T5118] device bridge_slave_0 entered promiscuous mode [ 142.199006][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.206268][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.215267][ T5118] device bridge_slave_1 entered promiscuous mode [ 142.245397][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.252556][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.261249][ T5125] device bridge_slave_0 entered promiscuous mode [ 142.308506][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.315612][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.325031][ T5125] device bridge_slave_1 entered promiscuous mode [ 142.337009][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.351900][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.388040][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.404259][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.468707][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.488117][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.495482][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.503800][ T5117] device bridge_slave_0 entered promiscuous mode [ 142.527956][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.535161][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.543930][ T5123] device bridge_slave_0 entered promiscuous mode [ 142.555328][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.567189][ T5128] team0: Port device team_slave_0 added [ 142.576096][ T5128] team0: Port device team_slave_1 added [ 142.582679][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.589921][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.597734][ T5117] device bridge_slave_1 entered promiscuous mode [ 142.615597][ T5118] team0: Port device team_slave_0 added [ 142.621859][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.629495][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.637294][ T5123] device bridge_slave_1 entered promiscuous mode [ 142.672712][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.680191][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.687910][ T5131] device bridge_slave_0 entered promiscuous mode [ 142.696840][ T5118] team0: Port device team_slave_1 added [ 142.736392][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.744194][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.756876][ T5131] device bridge_slave_1 entered promiscuous mode [ 142.783397][ T5125] team0: Port device team_slave_0 added [ 142.790041][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.797002][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.824134][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.839145][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.868921][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.879337][ T5125] team0: Port device team_slave_1 added [ 142.885648][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.893056][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.921196][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.935322][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.956923][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.963990][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.991447][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.005081][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.012276][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.038255][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.050986][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.084723][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.116732][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.123943][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.151060][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.164867][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.172028][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.198295][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.219095][ T5121] Bluetooth: hci0: command 0x0409 tx timeout [ 143.219940][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.225469][ T5121] Bluetooth: hci2: command 0x0409 tx timeout [ 143.241079][ T5135] Bluetooth: hci1: command 0x0409 tx timeout [ 143.272282][ T5123] team0: Port device team_slave_0 added [ 143.293267][ T5117] team0: Port device team_slave_0 added [ 143.298379][ T5121] Bluetooth: hci4: command 0x0409 tx timeout [ 143.299600][ T5126] Bluetooth: hci3: command 0x0409 tx timeout [ 143.332246][ T5123] team0: Port device team_slave_1 added [ 143.360990][ T5117] team0: Port device team_slave_1 added [ 143.378524][ T5126] Bluetooth: hci5: command 0x0409 tx timeout [ 143.385966][ T5118] device hsr_slave_0 entered promiscuous mode [ 143.392954][ T5118] device hsr_slave_1 entered promiscuous mode [ 143.411211][ T5128] device hsr_slave_0 entered promiscuous mode [ 143.417951][ T5128] device hsr_slave_1 entered promiscuous mode [ 143.425241][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.433225][ T5128] Cannot create hsr debugfs directory [ 143.455759][ T5131] team0: Port device team_slave_0 added [ 143.508125][ T5125] device hsr_slave_0 entered promiscuous mode [ 143.515933][ T5125] device hsr_slave_1 entered promiscuous mode [ 143.529845][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.537438][ T5125] Cannot create hsr debugfs directory [ 143.564304][ T5131] team0: Port device team_slave_1 added [ 143.580020][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.586991][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.616080][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.642798][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.649846][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.675997][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.716495][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.723641][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.750273][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.771012][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.777990][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.804702][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.836688][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.843785][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.871301][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.886232][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.893356][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.919443][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.023620][ T5123] device hsr_slave_0 entered promiscuous mode [ 144.030703][ T5123] device hsr_slave_1 entered promiscuous mode [ 144.037259][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.045418][ T5123] Cannot create hsr debugfs directory [ 144.122726][ T5117] device hsr_slave_0 entered promiscuous mode [ 144.129546][ T5117] device hsr_slave_1 entered promiscuous mode [ 144.136069][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.143966][ T5117] Cannot create hsr debugfs directory [ 144.161266][ T5131] device hsr_slave_0 entered promiscuous mode [ 144.168005][ T5131] device hsr_slave_1 entered promiscuous mode [ 144.174833][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.182900][ T5131] Cannot create hsr debugfs directory [ 144.428145][ T5118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.468809][ T5118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.491157][ T5118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.512611][ T5118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.563982][ T5128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.595296][ T5128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.620194][ T5128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.631199][ T5128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.698128][ T5117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.707266][ T5117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.718813][ T5117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.756151][ T5117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.771808][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.829931][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.838399][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.873326][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.920562][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.930426][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.940194][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.947386][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.956020][ T5125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.971923][ T5125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.999517][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.007792][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.016666][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.025401][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.032546][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.052218][ T5125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.062521][ T5125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.093769][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.120890][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.130642][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.140430][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.149929][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.212034][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.222428][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.231948][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.242395][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.251418][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.260474][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.269715][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.279075][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.287508][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.295990][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.303388][ T5126] Bluetooth: hci2: command 0x041b tx timeout [ 145.303429][ T5126] Bluetooth: hci1: command 0x041b tx timeout [ 145.308398][ T5126] Bluetooth: hci0: command 0x041b tx timeout [ 145.337871][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.378359][ T5126] Bluetooth: hci4: command 0x041b tx timeout [ 145.378913][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.384418][ T5126] Bluetooth: hci3: command 0x041b tx timeout [ 145.406416][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.425364][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.432547][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.450551][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.468870][ T5126] Bluetooth: hci5: command 0x041b tx timeout [ 145.470389][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.493297][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.500487][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.508796][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.543545][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.569833][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.589510][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.610116][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.619823][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.638915][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.648093][ T5123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.681594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.691728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.708457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.717400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.735628][ T5123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.752105][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.825409][ T5128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.855842][ T5128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.882334][ T5123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.913800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.922917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.932491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.941768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.951369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.962547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.971708][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.978898][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.991297][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.999538][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.043025][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.068676][ T5123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.125181][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.156426][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.164377][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.183140][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.198903][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.206034][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.241698][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.270504][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.309492][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.340853][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.377249][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.387329][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.397625][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.408746][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.417533][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.425932][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.434520][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.443442][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.466766][ T5131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.484831][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.500159][ T5117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.519937][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.528093][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.539176][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.548024][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.556863][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.565293][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.574308][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.583030][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.590239][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.611608][ T5131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.634915][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.643887][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.653071][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.661583][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.668718][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.680150][ T5131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.706271][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.714975][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.724133][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.738772][ T5118] device veth0_vlan entered promiscuous mode [ 146.749243][ T5131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.782025][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.790584][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.799697][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.809251][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.829517][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.848631][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.857461][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.872703][ T5118] device veth1_vlan entered promiscuous mode [ 146.892675][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.901710][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.910665][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.918701][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.926199][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.935632][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.977464][ T5125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.995926][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.005090][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.014634][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.023721][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.052142][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.095679][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.105350][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.135227][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.146752][ T5118] device veth0_macvtap entered promiscuous mode [ 147.160726][ T5118] device veth1_macvtap entered promiscuous mode [ 147.196678][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.206003][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.239642][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.247859][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.279170][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.288047][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.318859][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.335421][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.357191][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.376804][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.383759][ T5121] Bluetooth: hci0: command 0x040f tx timeout [ 147.383902][ T5126] Bluetooth: hci1: command 0x040f tx timeout [ 147.390945][ T5135] Bluetooth: hci2: command 0x040f tx timeout [ 147.403431][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.414551][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.423527][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.432698][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.442165][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.450481][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.458400][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.459330][ T5135] Bluetooth: hci4: command 0x040f tx timeout [ 147.466791][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.472303][ T5135] Bluetooth: hci3: command 0x040f tx timeout [ 147.525370][ T5128] device veth0_vlan entered promiscuous mode [ 147.547164][ T5118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.556411][ T5135] Bluetooth: hci5: command 0x040f tx timeout [ 147.575329][ T5118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.584884][ T5118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.594110][ T5118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.615764][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.630788][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.649012][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.663498][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.678834][ T900] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.685953][ T900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.715790][ T5128] device veth1_vlan entered promiscuous mode [ 147.754079][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.780052][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.789021][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.797121][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.819217][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.827850][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.835028][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.843322][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.852596][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.874731][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.922411][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.949151][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.957416][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.965509][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.983296][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.997261][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.015401][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.024798][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.034030][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.042769][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.051265][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.059562][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.083911][ T5123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.097713][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.131112][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.140739][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.158970][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.183814][ T5128] device veth0_macvtap entered promiscuous mode [ 148.213184][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.223295][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.239518][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.246630][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.268598][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.283059][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.298801][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.305921][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.328956][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.337806][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.383749][ T5128] device veth1_macvtap entered promiscuous mode [ 148.392898][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.404735][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.413788][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.422652][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.432104][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.444706][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.457196][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.466429][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.475703][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.500866][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.509199][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.518053][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.527587][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.536903][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.566686][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.588664][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.609670][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.620466][ T5131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.632680][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.665429][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.681041][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.708298][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.708968][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.750170][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.759337][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.777866][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.792745][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.816238][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.828530][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.855136][ T5117] device veth0_vlan entered promiscuous mode [ 148.863024][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.871983][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.881760][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.890699][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.901638][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.917314][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.931000][ T5128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.940312][ T5128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.949636][ T5128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.958754][ T5128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.971073][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.981286][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.996299][ T5117] device veth1_vlan entered promiscuous mode [ 149.021241][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.039574][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.047637][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.057218][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.066472][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.074821][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.125978][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.142606][ T5125] device veth0_vlan entered promiscuous mode [ 149.162959][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.175489][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.184390][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.236898][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.247727][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.256181][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.265365][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.274399][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.282051][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.302413][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.312287][ T5117] device veth0_macvtap entered promiscuous mode [ 149.324272][ T5125] device veth1_vlan entered promiscuous mode [ 149.349672][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.359102][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.367895][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.400788][ T5117] device veth1_macvtap entered promiscuous mode [ 149.448443][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.456458][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.459321][ T5135] Bluetooth: hci2: command 0x0419 tx timeout [ 149.465331][ T5121] Bluetooth: hci0: command 0x0419 tx timeout [ 149.470541][ T5135] Bluetooth: hci1: command 0x0419 tx timeout [ 149.486939][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.522940][ T5123] device veth0_vlan entered promiscuous mode [ 149.538338][ T5135] Bluetooth: hci3: command 0x0419 tx timeout [ 149.538677][ T5126] Bluetooth: hci4: command 0x0419 tx timeout [ 149.559681][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.568089][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.576746][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.584990][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.602285][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.602563][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.621270][ T5126] Bluetooth: hci5: command 0x0419 tx timeout [ 149.627353][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.634334][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.644929][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.655698][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.667566][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.692096][ T5131] device veth0_vlan entered promiscuous mode [ 149.704674][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.714788][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.724250][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.734934][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.745021][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.755567][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.768244][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.778144][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.790721][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.802540][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.813425][ T5123] device veth1_vlan entered promiscuous mode [ 149.831340][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.840054][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.847740][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.856212][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.865655][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.882026][ T5117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.891492][ T5117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.900770][ T5117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.911996][ T5117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 07:16:49 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10120, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x6000000000000000}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) [ 149.926733][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.929541][ T5131] device veth1_vlan entered promiscuous mode [ 149.936252][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.971345][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.981288][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.989878][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.032948][ T5123] device veth0_macvtap entered promiscuous mode [ 150.050834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.060619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.070062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.079104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.087543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.109918][ T5125] device veth0_macvtap entered promiscuous mode [ 150.127298][ T5125] device veth1_macvtap entered promiscuous mode [ 150.142596][ T5123] device veth1_macvtap entered promiscuous mode [ 150.146713][ T5225] hub 9-0:1.0: USB hub found [ 150.161399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.168798][ T5225] hub 9-0:1.0: 8 ports detected [ 150.194736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.204965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.224828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 07:16:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) [ 150.254767][ T5131] device veth0_macvtap entered promiscuous mode [ 150.297084][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.317912][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.336109][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.353490][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.364609][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.375338][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.385583][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.396568][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.413348][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.423816][ T5131] device veth1_macvtap entered promiscuous mode [ 150.440230][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.449165][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.457435][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.466475][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.477571][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.491787][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.504843][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.515430][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.525867][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.536416][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:16:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) [ 150.548359][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.567360][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.583222][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.619593][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.632108][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.642089][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.653573][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:16:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) [ 150.664415][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.675506][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.701135][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 07:16:50 executing program 2: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) [ 150.723853][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.734691][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.762701][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 07:16:50 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10120, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x6000000000000000}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) [ 150.794712][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.828792][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 07:16:50 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x13fd, r2}, 0x38) [ 150.841260][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.854534][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.866989][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.891338][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.903096][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.913456][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.928379][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.938386][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.949207][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.971955][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.993910][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.037164][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.085791][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.108338][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.118638][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.129952][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.140644][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.152039][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.164260][ T5243] hub 9-0:1.0: USB hub found [ 151.164644][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.180043][ T5243] hub 9-0:1.0: 8 ports detected [ 151.198226][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.247632][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.259380][ T5123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.273066][ T5123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.282666][ T5123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.291750][ T5123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.308008][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.324781][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.334045][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.346069][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.356088][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.369120][ T5125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.389065][ T5125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.398128][ T5125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.413377][ T5125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.440155][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.456071][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.469348][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.481617][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.499817][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.515133][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.526367][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.543924][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.557476][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.575547][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.594112][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.620641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.638098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.672435][ T5131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.684289][ T5131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.693646][ T5131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.710040][ T5131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.739437][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.782618][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.980202][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.058599][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.060802][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.066620][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.113333][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.134074][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.163599][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.182210][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.182463][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.194867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:16:51 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellinkprop={0xd8, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8100, 0x88}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xce}, @IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7b}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7fffffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xc6}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x76}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "f4ea3e1fe56449c4c83f"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000054}, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) [ 152.210728][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.242788][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.256678][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.311156][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.319803][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.327773][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.344062][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.378796][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.405394][ T5178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.416934][ T5254] sched: RT throttling activated [ 154.802800][ T5259] overlayfs: overlapping lowerdir path [ 154.834944][ T5256] xt_CT: No such helper "netbios-ns" 07:16:54 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffd67}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 07:16:54 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10120, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x6000000000000000}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) 07:16:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:16:54 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:16:54 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellinkprop={0xd8, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8100, 0x88}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xce}, @IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7b}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7fffffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xc6}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x76}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "f4ea3e1fe56449c4c83f"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000054}, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) 07:16:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:16:54 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellinkprop={0xd8, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8100, 0x88}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xce}, @IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7b}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7fffffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xc6}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x76}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "f4ea3e1fe56449c4c83f"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000054}, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) [ 156.998581][ T5277] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 157.022735][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.030679][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.802151][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'acpi_pm' as unstable because the skew is too large: [ 157.814972][ C1] clocksource: 'tsc' wd_nsec: 2353899299 wd_now: 52edf05d7e wd_last: 51b93f914c mask: ffffffffffffffff [ 157.827989][ C1] clocksource: 'acpi_pm' cs_nsec: 0 cs_now: 770e72 cs_last: f67a44 mask: ffffff [ 157.838989][ C1] clocksource: Clocksource 'acpi_pm' skewed -2353899299 ns (18446744071355 ms) over watchdog 'tsc' interval of 2353899299 ns (2353 ms) [ 157.854802][ C1] clocksource: 'tsc' (not 'acpi_pm') is current clocksource. [ 159.758290][ T5281] xt_CT: No such helper "netbios-ns" [ 159.788673][ T5277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:16:59 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:16:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:16:59 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffd67}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 07:16:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:16:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:16:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) [ 160.622639][ T5301] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 160.642134][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.650360][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.378271][ T5302] xt_CT: No such helper "netbios-ns" 07:17:01 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:17:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) [ 161.802911][ T5301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.825320][ T5300] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 161.838463][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.294712][ T5300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.332304][ T5313] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 164.368036][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.376178][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:17:03 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffd67}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 07:17:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:17:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) [ 165.458359][ T5313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.554966][ T5321] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 165.575925][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.844685][ T5331] xt_CT: No such helper "netbios-ns" 07:17:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) [ 166.268979][ T5321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:17:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) [ 168.315009][ T5334] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 168.342767][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.738291][ T5334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.753979][ T5341] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 168.766549][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:17:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) [ 168.856332][ T5341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.903684][ T5350] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 169.916645][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.820324][ T5350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.855264][ T5352] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 07:17:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 170.874858][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.883103][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.946321][ T5352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.304637][ T5360] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 171.325909][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.422018][ T5360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:17:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) [ 173.755010][ T5371] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 173.791215][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.799241][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:17:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 175.443402][ T5371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.645315][ T5386] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 176.689245][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.698253][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.799148][ T5386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.838108][ T5387] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 177.851008][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.459351][ T5387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:17:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:17:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:17:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 183.069625][ T5406] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 183.284889][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:17:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 186.269720][ T5406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.306831][ T5410] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 186.319826][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.329386][ T5410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:17:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 07:17:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:17:25 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:17:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 186.747419][ T5419] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 186.768221][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.894679][ T5419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:17:28 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:17:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:17:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 190.230776][ T5437] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 190.243639][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:17:29 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:17:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) [ 190.870003][ T5437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.628200][ T5448] xt_CT: No such helper "netbios-ns" [ 191.858195][ T5449] xt_CT: No such helper "netbios-ns" 07:17:32 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:17:32 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:17:32 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellinkprop={0xd8, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8100, 0x88}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xce}, @IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7b}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7fffffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xc6}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x76}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "f4ea3e1fe56449c4c83f"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000054}, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) 07:17:32 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellinkprop={0xd8, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8100, 0x88}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xce}, @IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7b}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7fffffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xc6}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x76}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "f4ea3e1fe56449c4c83f"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000054}, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) [ 195.169159][ T5469] xt_CT: No such helper "netbios-ns" [ 195.749553][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.755957][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 07:17:35 executing program 5: clock_adjtime(0x0, &(0x7f0000000000)={0x8}) 07:17:35 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:35 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) kcmp(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x400000, 0x84) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000140)=ANY=[], 0x116) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc2a195e77c7f7f358f4af87c16d9c4c5b662275dac011173f0a3dff6bd10800a8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be591f0df69466a9f4a078", 0x5a}], 0x2, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYRESHEX, @ANYRES32=r6, @ANYRES64, @ANYRES64=r8, @ANYRESDEC=r9, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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"], 0x40, 0x800}}], 0x1, 0x2000c805) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x38}}, 0x0) r10 = dup3(r7, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006c0000022dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 07:17:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1) 07:17:35 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x4000, 0x0, 0x54, 0xb3550aa4ba878394}, 0x9c) [ 196.265211][ T27] audit: type=1800 audit(1675149455.493:2): pid=5477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1163 res=0 errno=0 [ 196.819647][ T5482] xt_CT: No such helper "netbios-ns" [ 196.873060][ T27] audit: type=1804 audit(1675149455.513:3): pid=5477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3653019598/syzkaller.n0imFy/10/file0" dev="sda1" ino=1163 res=1 errno=0 07:17:36 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000004880)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x3, 0x2, 0x2, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x218, 0x2b8, 0x25c, 0x128, 0x7, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x128, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00', {}, {}, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 07:17:36 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellinkprop={0xd8, 0x6d, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8100, 0x88}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xce}, @IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7b}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7fffffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0xc6}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x76}]}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3f}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "f4ea3e1fe56449c4c83f"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000054}, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) [ 197.079433][ T27] audit: type=1804 audit(1675149455.663:4): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3653019598/syzkaller.n0imFy/10/file0" dev="sda1" ino=1163 res=1 errno=0 07:17:36 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) [ 197.468703][ T5504] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 198.327915][ T5507] xt_CT: No such helper "netbios-ns" [ 198.368610][ T27] audit: type=1800 audit(1675149457.603:5): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1187 res=0 errno=0 07:17:37 executing program 3: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:37 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) [ 198.587724][ T27] audit: type=1804 audit(1675149457.643:6): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3653019598/syzkaller.n0imFy/11/file0" dev="sda1" ino=1187 res=1 errno=0 07:17:37 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) kcmp(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x400000, 0x84) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000140)=ANY=[], 0x116) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc2a195e77c7f7f358f4af87c16d9c4c5b662275dac011173f0a3dff6bd10800a8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be591f0df69466a9f4a078", 0x5a}], 0x2, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYRESHEX, @ANYRES32=r6, @ANYRES64, @ANYRES64=r8, @ANYRESDEC=r9, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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"], 0x40, 0x800}}], 0x1, 0x2000c805) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x38}}, 0x0) r10 = dup3(r7, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006c0000022dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 07:17:37 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) [ 198.689462][ T27] audit: type=1804 audit(1675149457.743:7): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3653019598/syzkaller.n0imFy/11/file0" dev="sda1" ino=1187 res=1 errno=0 07:17:38 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x4000, 0x0, 0x54, 0xb3550aa4ba878394}, 0x9c) [ 198.856886][ T27] audit: type=1800 audit(1675149458.033:8): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1164 res=0 errno=0 07:17:38 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) [ 198.936177][ T27] audit: type=1804 audit(1675149458.033:9): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2237436028/syzkaller.3vMzfP/10/file0" dev="sda1" ino=1164 res=1 errno=0 [ 199.005092][ T27] audit: type=1800 audit(1675149458.073:10): pid=5517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1168 res=0 errno=0 [ 199.045641][ T27] audit: type=1804 audit(1675149458.083:11): pid=5517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2776881778/syzkaller.cNliXR/13/file0" dev="sda1" ino=1168 res=1 errno=0 07:17:38 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) kcmp(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x400000, 0x84) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000140)=ANY=[], 0x116) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc2a195e77c7f7f358f4af87c16d9c4c5b662275dac011173f0a3dff6bd10800a8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be591f0df69466a9f4a078", 0x5a}], 0x2, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYRESHEX, @ANYRES32=r6, @ANYRES64, @ANYRES64=r8, @ANYRESDEC=r9, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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"], 0x40, 0x800}}], 0x1, 0x2000c805) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x38}}, 0x0) r10 = dup3(r7, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006c0000022dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 07:17:38 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x4000, 0x0, 0x54, 0xb3550aa4ba878394}, 0x9c) 07:17:38 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:39 executing program 3: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:39 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) kcmp(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$incfs(r0, &(0x7f0000000240)='.log\x00', 0x400000, 0x84) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000140)=ANY=[], 0x116) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc2a195e77c7f7f358f4af87c16d9c4c5b662275dac011173f0a3dff6bd10800a8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be591f0df69466a9f4a078", 0x5a}], 0x2, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYRESHEX, @ANYRES32=r6, @ANYRES64, @ANYRES64=r8, @ANYRESDEC=r9, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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"], 0x40, 0x800}}], 0x1, 0x2000c805) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x38}}, 0x0) r10 = dup3(r7, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006c0000022dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 07:17:39 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) [ 200.170855][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory 07:17:39 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x4000, 0x0, 0x54, 0xb3550aa4ba878394}, 0x9c) 07:17:39 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:40 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:40 executing program 3: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:40 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004190}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x2, 0x80000001}) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat(r3, &(0x7f0000000340)='./bus\x00', 0x10d280, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff04) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8000) 07:17:40 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x4000, 0x0, 0x54, 0xb3550aa4ba878394}, 0x9c) [ 201.259317][ T5574] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 201.271061][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 201.271077][ T27] audit: type=1804 audit(1675149460.503:34): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2776881778/syzkaller.cNliXR/15/file0" dev="sda1" ino=1168 res=1 errno=0 [ 201.277124][ T5574] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 201.277142][ T5574] CPU: 0 PID: 5574 Comm: syz-executor.4 Not tainted 6.2.0-rc6-next-20230131-syzkaller-09515-g80bd9028feca #0 [ 201.321600][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 201.331678][ T5574] RIP: 0010:sctp_backlog_rcv+0xaf/0x5b0 [ 201.337296][ T5574] Code: 48 8d 5d 20 0f 85 b1 04 00 00 49 8b 85 e8 00 00 00 48 8d 7d 08 48 89 fa 48 c1 ea 03 48 89 04 24 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 02 84 c0 74 06 0f 8e 0c 03 00 00 44 0f b6 7d 08 31 ff 44 [ 201.356939][ T5574] RSP: 0018:ffffc90005b1fc00 EFLAGS: 00010202 [ 201.363044][ T5574] RAX: dffffc0000000000 RBX: 0000000000000020 RCX: ffffc900044e5000 [ 201.371033][ T5574] RDX: 0000000000000001 RSI: ffffffff89605e0d RDI: 0000000000000008 [ 201.379012][ T5574] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 201.386991][ T5574] R10: 0000000000000000 R11: 0000000000094001 R12: ffff88814a802d00 [ 201.394964][ T5574] R13: ffff8880778f2140 R14: ffff888070bb3c80 R15: 0000000000000000 [ 201.403476][ T5574] FS: 00007f0eda6af700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 201.412417][ T5574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.419007][ T5574] CR2: 00005555555c2888 CR3: 0000000029fe1000 CR4: 00000000003506f0 [ 201.426988][ T5574] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.434963][ T5574] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.442936][ T5574] Call Trace: [ 201.446215][ T5574] [ 201.449154][ T5574] __release_sock+0x133/0x3b0 [ 201.453855][ T5574] ? release_sock+0x1f/0x1b0 [ 201.458471][ T5574] release_sock+0x58/0x1b0 [ 201.462902][ T5574] sctp_setsockopt+0x64a/0xab90 [ 201.467778][ T5574] ? __sctp_setsockopt_connectx+0x170/0x170 [ 201.473688][ T5574] ? aa_af_perm+0x240/0x240 [ 201.478210][ T5574] ? sock_common_setsockopt+0x2f/0x110 [ 201.483698][ T5574] ? sock_common_recvmsg+0x190/0x190 [ 201.489005][ T5574] __sys_setsockopt+0x2c6/0x5b0 [ 201.493873][ T5574] ? __ia32_sys_recv+0x100/0x100 [ 201.498835][ T5574] __x64_sys_setsockopt+0xbe/0x160 [ 201.503966][ T5574] ? syscall_enter_from_user_mode+0x26/0xb0 [ 201.509872][ T5574] do_syscall_64+0x39/0xb0 [ 201.514307][ T5574] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 201.520213][ T5574] RIP: 0033:0x7f0ed988c0c9 [ 201.524628][ T5574] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 201.544243][ T5574] RSP: 002b:00007f0eda6af168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.552687][ T5574] RAX: ffffffffffffffda RBX: 00007f0ed99ac050 RCX: 00007f0ed988c0c9 [ 201.560664][ T5574] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 201.568638][ T5574] RBP: 00007f0ed98e7ae9 R08: 000000000000009c R09: 0000000000000000 [ 201.576613][ T5574] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000000 [ 201.584595][ T5574] R13: 00007ffc6d02065f R14: 00007f0eda6af300 R15: 0000000000022000 [ 201.592574][ T5574] [ 201.595592][ T5574] Modules linked in: [ 201.661249][ T27] audit: type=1800 audit(1675149460.843:35): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1156 res=0 errno=0 [ 201.695843][ T27] audit: type=1804 audit(1675149460.843:36): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2237436028/syzkaller.3vMzfP/12/file0" dev="sda1" ino=1156 res=1 errno=0 [ 201.724853][ T27] audit: type=1804 audit(1675149460.913:37): pid=5587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2237436028/syzkaller.3vMzfP/12/file0" dev="sda1" ino=1156 res=1 errno=0 [ 201.728273][ T5574] ---[ end trace 0000000000000000 ]--- [ 201.759011][ T27] audit: type=1800 audit(1675149460.983:38): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1190 res=0 errno=0 [ 201.785532][ T27] audit: type=1804 audit(1675149460.983:39): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3452772802/syzkaller.SWiEqj/15/file0" dev="sda1" ino=1190 res=1 errno=0 07:17:41 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f1ab05700f00fba3003360f05c50f01c336660fc770ecf4f080081f66b9800000c00f326635010000000f30f30fa7d00f01d9", 0x33}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x4000, 0x0, 0x54, 0xb3550aa4ba878394}, 0x9c) [ 201.819041][ T5574] RIP: 0010:sctp_backlog_rcv+0xaf/0x5b0 [ 201.833221][ T5574] Code: 48 8d 5d 20 0f 85 b1 04 00 00 49 8b 85 e8 00 00 00 48 8d 7d 08 48 89 fa 48 c1 ea 03 48 89 04 24 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 02 84 c0 74 06 0f 8e 0c 03 00 00 44 0f b6 7d 08 31 ff 44 [ 201.854476][ T5574] RSP: 0018:ffffc90005b1fc00 EFLAGS: 00010202 [ 201.855056][ T27] audit: type=1804 audit(1675149461.083:40): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3452772802/syzkaller.SWiEqj/15/file0" dev="sda1" ino=1190 res=1 errno=0 [ 201.864778][ T5574] RAX: dffffc0000000000 RBX: 0000000000000020 RCX: ffffc900044e5000 [ 201.895345][ T5574] RDX: 0000000000000001 RSI: ffffffff89605e0d RDI: 0000000000000008 [ 201.903724][ T5574] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 201.912442][ T5574] R10: 0000000000000000 R11: 0000000000094001 R12: ffff88814a802d00 [ 201.923619][ T5574] R13: ffff8880778f2140 R14: ffff888070bb3c80 R15: 0000000000000000 [ 201.932424][ T5574] FS: 00007f0eda6af700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 201.943901][ T5574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.951016][ T5574] CR2: 00007f53601ad988 CR3: 0000000029fe1000 CR4: 00000000003506e0 [ 201.960040][ T5574] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.982617][ T5574] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.001399][ T5574] Kernel panic - not syncing: Fatal exception [ 202.007661][ T5574] Kernel Offset: disabled [ 202.011986][ T5574] Rebooting in 86400 seconds..