[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. 2020/05/11 09:15:16 fuzzer started 2020/05/11 09:15:17 dialing manager at 10.128.0.26:35079 2020/05/11 09:15:17 syscalls: 1390 2020/05/11 09:15:17 code coverage: enabled 2020/05/11 09:15:17 comparison tracing: enabled 2020/05/11 09:15:17 extra coverage: enabled 2020/05/11 09:15:17 setuid sandbox: enabled 2020/05/11 09:15:17 namespace sandbox: enabled 2020/05/11 09:15:17 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/11 09:15:17 fault injection: enabled 2020/05/11 09:15:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/11 09:15:17 net packet injection: enabled 2020/05/11 09:15:17 net device setup: enabled 2020/05/11 09:15:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/11 09:15:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/11 09:15:17 USB emulation: /dev/raw-gadget does not exist 09:16:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x38, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18}]}, 0x38}}, 0x0) syzkaller login: [ 156.954440][ T7038] IPVS: ftp: loaded support on port[0] = 21 09:16:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0) [ 157.111923][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 157.283027][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.299653][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.307732][ T7038] device bridge_slave_0 entered promiscuous mode [ 157.329926][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.337162][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.348151][ T7162] IPVS: ftp: loaded support on port[0] = 21 [ 157.360759][ T7038] device bridge_slave_1 entered promiscuous mode 09:16:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r0, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) [ 157.431318][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.461467][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.536133][ T7038] team0: Port device team_slave_0 added [ 157.561954][ T7038] team0: Port device team_slave_1 added [ 157.696313][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.704904][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.758228][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.782242][ T7162] chnl_net:caif_netlink_parms(): no params data found [ 157.795103][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 09:16:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 157.802634][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.830760][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.885283][ T7287] IPVS: ftp: loaded support on port[0] = 21 [ 157.976394][ T7038] device hsr_slave_0 entered promiscuous mode [ 158.049401][ T7038] device hsr_slave_1 entered promiscuous mode 09:16:58 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "1000", 0x48, 0x2f, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0]}}}}}}}, 0x0) [ 158.188448][ T7317] IPVS: ftp: loaded support on port[0] = 21 [ 158.276450][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.289024][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.297249][ T7162] device bridge_slave_0 entered promiscuous mode [ 158.352227][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.360909][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.368728][ T7162] device bridge_slave_1 entered promiscuous mode [ 158.526401][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.601766][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.618055][ T7414] IPVS: ftp: loaded support on port[0] = 21 [ 158.698124][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 158.740982][ T7162] team0: Port device team_slave_0 added 09:16:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4022, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 158.802710][ T7162] team0: Port device team_slave_1 added [ 158.836989][ T7038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.980889][ T7038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.059457][ T7038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.097436][ T7038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.142592][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.150231][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.178266][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.229869][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.237230][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.246400][ T7287] device bridge_slave_0 entered promiscuous mode [ 159.264727][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.272474][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.300559][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.332866][ T7567] IPVS: ftp: loaded support on port[0] = 21 [ 159.360803][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.368085][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.378313][ T7287] device bridge_slave_1 entered promiscuous mode [ 159.407360][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.463433][ T7162] device hsr_slave_0 entered promiscuous mode [ 159.509762][ T7162] device hsr_slave_1 entered promiscuous mode [ 159.559210][ T7162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.567162][ T7162] Cannot create hsr debugfs directory [ 159.601709][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 159.614647][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.713756][ T7287] team0: Port device team_slave_0 added [ 159.725971][ T7287] team0: Port device team_slave_1 added [ 159.741319][ T7414] chnl_net:caif_netlink_parms(): no params data found [ 159.814712][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.823471][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.853319][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.868528][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.876611][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.904043][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.037918][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.045990][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.055668][ T7414] device bridge_slave_0 entered promiscuous mode [ 160.064006][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.074769][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.086810][ T7317] device bridge_slave_0 entered promiscuous mode [ 160.096788][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.104275][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.112946][ T7317] device bridge_slave_1 entered promiscuous mode [ 160.174937][ T7287] device hsr_slave_0 entered promiscuous mode [ 160.229517][ T7287] device hsr_slave_1 entered promiscuous mode [ 160.269377][ T7287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.277721][ T7287] Cannot create hsr debugfs directory [ 160.294842][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.302793][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.312071][ T7414] device bridge_slave_1 entered promiscuous mode [ 160.407106][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.425245][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.473116][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.484845][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.575825][ T7567] chnl_net:caif_netlink_parms(): no params data found [ 160.588329][ T7317] team0: Port device team_slave_0 added [ 160.598448][ T7414] team0: Port device team_slave_0 added [ 160.612611][ T7414] team0: Port device team_slave_1 added [ 160.636910][ T7317] team0: Port device team_slave_1 added [ 160.645533][ T7162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.728139][ T7162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.762376][ T7162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.825573][ T7162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.895153][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.904332][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.932966][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.950020][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.957118][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.984385][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.012960][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.020954][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.048629][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.091961][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.101926][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.132312][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.233476][ T7317] device hsr_slave_0 entered promiscuous mode [ 161.299893][ T7317] device hsr_slave_1 entered promiscuous mode [ 161.339132][ T7317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.347220][ T7317] Cannot create hsr debugfs directory [ 161.436334][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.448691][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.456440][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.465317][ T7567] device bridge_slave_0 entered promiscuous mode [ 161.535829][ T7414] device hsr_slave_0 entered promiscuous mode [ 161.589599][ T7414] device hsr_slave_1 entered promiscuous mode [ 161.639212][ T7414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.646907][ T7414] Cannot create hsr debugfs directory [ 161.664498][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.674765][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.684229][ T7567] device bridge_slave_1 entered promiscuous mode [ 161.714101][ T7567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.742209][ T7287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.804586][ T7567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.825763][ T7287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.864533][ T7287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.916320][ T7287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.992056][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.003145][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.044425][ T7567] team0: Port device team_slave_0 added [ 162.056522][ T7567] team0: Port device team_slave_1 added [ 162.102502][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.125396][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.133810][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.161895][ T7567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.175925][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.183586][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.210988][ T7567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.252658][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.265304][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.275666][ T2723] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.284334][ T2723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.394389][ T7567] device hsr_slave_0 entered promiscuous mode [ 162.449667][ T7567] device hsr_slave_1 entered promiscuous mode [ 162.489172][ T7567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.497177][ T7567] Cannot create hsr debugfs directory [ 162.504241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.514726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.526313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.537824][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.545525][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.641961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.696646][ T7317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.763134][ T7317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.850046][ T7317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.892092][ T7317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.962134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.990816][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.029326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.045608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.060406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.069952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.078469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.088077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.098375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.146963][ T7414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.220772][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.233190][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.242619][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.254034][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.271790][ T7414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.344149][ T7414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.418279][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.447379][ T7162] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.455727][ T7414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.523781][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.554586][ T7567] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.625758][ T7567] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.709363][ T7567] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.754865][ T7567] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.818492][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.827853][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.838633][ T2691] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.845993][ T2691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.855570][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.903553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.914663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.926270][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.933936][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.942921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.952868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.961112][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.968657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.977280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.015002][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.026578][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.038039][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.106100][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.115116][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.125824][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.136008][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.145184][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.152356][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.160759][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.170578][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.178959][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.186117][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.193948][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.203169][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.212597][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.221522][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.230313][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.239707][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.247761][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.291974][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.301668][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.311470][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.320645][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.330290][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.343221][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.366756][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.382150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.394463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.404076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.412399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.421715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.457852][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.469910][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.487245][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.503716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.513122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.554442][ T7287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.566134][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.602707][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.612129][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.622111][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.632872][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.642556][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.654961][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.662129][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.671034][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.715039][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.725902][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.735099][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.742287][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.751706][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.761589][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.771116][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.780050][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.788418][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.796901][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.806269][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.815431][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.837076][ T7038] device veth0_vlan entered promiscuous mode [ 164.877022][ T7567] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.888231][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.898612][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.907748][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.915505][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.923699][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.932123][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.949686][ T7162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.956853][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.966124][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.976146][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.996590][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.028960][ T7038] device veth1_vlan entered promiscuous mode [ 165.037948][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.048334][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.058628][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.067284][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.075918][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.088534][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.110301][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.133483][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.145394][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.155066][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.164722][ T2691] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.171964][ T2691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.210496][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.218585][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.231259][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.240769][ T2723] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.247825][ T2723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.257522][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.266842][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.275168][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.306294][ T7414] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.318884][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.374052][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.383581][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.397157][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.406801][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.416886][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.426651][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.435875][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.443058][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.451893][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.461188][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.470208][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.477405][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.485237][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.494863][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.503856][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.511542][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.519013][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.528493][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.537503][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.546364][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.593069][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.605391][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.614379][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.623424][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.632958][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.645514][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.672103][ T7567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.688668][ T7567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.698076][ T7038] device veth0_macvtap entered promiscuous mode [ 165.706876][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.715758][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.725122][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.734422][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.744064][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.752733][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.775369][ T7162] device veth0_vlan entered promiscuous mode [ 165.795746][ T7038] device veth1_macvtap entered promiscuous mode [ 165.805077][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.815031][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.823973][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.833044][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.841970][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.851312][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.866271][ T7287] device veth0_vlan entered promiscuous mode [ 165.887053][ T7162] device veth1_vlan entered promiscuous mode [ 165.896761][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.905679][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.914507][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.923367][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.931606][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.940825][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.994907][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.004374][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.014550][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.025854][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.034100][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.042338][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.051375][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.065491][ T7287] device veth1_vlan entered promiscuous mode [ 166.086413][ T7567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.104274][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.127307][ T7414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.140828][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.151094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.164394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.174109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.183252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.193067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.203086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.224035][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.238812][ T7317] device veth0_vlan entered promiscuous mode [ 166.256329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.264623][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.273358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.283297][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.293120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.302858][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.341667][ T7162] device veth0_macvtap entered promiscuous mode [ 166.379433][ T7317] device veth1_vlan entered promiscuous mode [ 166.467680][ T7162] device veth1_macvtap entered promiscuous mode [ 166.536488][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.546990][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.555918][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.565475][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.576189][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.585190][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.635718][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.648075][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.680454][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.722417][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.737072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.748250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.766118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.777002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.792656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.806783][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.817669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.829628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.851906][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.861668][ T7287] device veth0_macvtap entered promiscuous mode [ 166.873699][ T8302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.910063][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:17:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b01adc2f2", 0x10}], 0x1}, 0x0) [ 166.933885][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.946627][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.971454][ T7317] device veth0_macvtap entered promiscuous mode [ 166.984485][ T7287] device veth1_macvtap entered promiscuous mode 09:17:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{}], 0x20) [ 167.025066][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.036792][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.066479][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.083806][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:17:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b26, &(0x7f0000000040)) [ 167.123014][ T7317] device veth1_macvtap entered promiscuous mode [ 167.170232][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.178858][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.263112][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.276613][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.292355][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.303339][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.316287][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.327371][ T7567] device veth0_vlan entered promiscuous mode [ 167.337352][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.347180][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.355907][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.365229][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 09:17:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) [ 167.432675][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.452530][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.467113][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:17:08 executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e9200ff283ee23d00000000000000000000000000000800"}) [ 167.514627][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.545073][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.569040][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.583430][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.595125][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.611566][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.635171][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.666105][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.695062][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.754167][ T7567] device veth1_vlan entered promiscuous mode [ 167.767002][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.790086][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 09:17:08 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETSNDBUF(r0, 0xb701, 0x0) [ 167.803771][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.816401][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.840421][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 09:17:08 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000180)={r1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000040)) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) socket(0x11, 0x800000003, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 167.914032][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:17:08 executing program 1: syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast=[0xff, 0x0], @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f042", 0x3f8, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c000005dc791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a805721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee102a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) [ 167.966475][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.000126][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.051881][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.054545][ T8339] IPVS: ftp: loaded support on port[0] = 21 [ 168.072056][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.087649][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.109292][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.151355][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.164799][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.193240][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.242990][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.399489][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.408316][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.502612][ T7567] device veth0_macvtap entered promiscuous mode [ 168.525432][ T7414] device veth0_vlan entered promiscuous mode [ 168.534818][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.551107][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.560527][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.574193][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.583027][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.808238][ T7567] device veth1_macvtap entered promiscuous mode [ 168.842749][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.868886][ T8349] IPVS: ftp: loaded support on port[0] = 21 [ 168.925648][ T7414] device veth1_vlan entered promiscuous mode 09:17:09 executing program 1: syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast=[0xff, 0x0], @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f042", 0x3f8, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c000005dc791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a805721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee102a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) [ 169.045428][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.077330][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.114179][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.140164][ T27] audit: type=1804 audit(1589188629.654:2): pid=8396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/0/cgroup.controllers" dev="sda1" ino=15759 res=1 [ 169.153229][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.205033][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.229010][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.258975][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.288297][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.332965][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.385134][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.411396][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.421569][ T81] tipc: TX() has been purged, node left! [ 169.444971][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.467839][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.483676][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.503499][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.519378][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.537163][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.547862][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.564038][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.577841][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.617844][ T7414] device veth0_macvtap entered promiscuous mode [ 169.633275][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.647377][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.660424][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.674039][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 09:17:10 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000002600)=0x4) [ 169.714861][ T7414] device veth1_macvtap entered promiscuous mode [ 169.725755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.754686][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.847355][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.878639][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.915766][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.931386][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.942258][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.953848][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.965129][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.978276][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.003943][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.015012][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.027086][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.059699][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.070896][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.118367][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.137603][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.148822][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.161253][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.171942][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.183082][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.193590][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.204655][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.215703][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.226433][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.238944][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.250437][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.260200][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:17:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000080)) 09:17:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a60000000af40802"}}}}, 0x8a) 09:17:11 executing program 1: syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast=[0xff, 0x0], @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f042", 0x3f8, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c000005dc791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a805721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee102a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "422bf7b5e0f2dbbdc849b90d4e80a0e3f7af088060d01a1cfcfad88ef4512c6ef5c0ead4b9cc87484b106a060a9899d50f595204418f51e914c88c29078a5457de6a262cadf02b071d88e61703f037caded0b315701274012fa532ddd69499074e1a2df196e0afcffda08fb3d82ab8160253a47d3efc3d7cead55c28610ae20f69aaced0a1a6ce815344cf8d0bc8a0dfcdd1e8cd7242601777ec653c2d4b704397dcb1350982afd017eaa630c840d71589499fd68239ae0c0aa2fc9b949d1a716d40a24f078e92e8c268ff726290944b5f3a3bea9559f2d2a51405fba224411ecc49544dea47917a98bf79c3bfeed70429abf70a52ecbda21c9bf0f6a70cd2c2c887391e4095ad22b437c60abf829447b47bd231ca2a98d9da7519a4bd28e803fa000fafc0dc453ed56cdf4356d7abcfec4eed0b94a4f78ce44a7177c6684026ba4f26a17e52e326c8bb7be5e2ea5780d7169d8f4ff62cb2b223f1d6221f62e0ee0244d86042560edd36853c464b23be536c65b87cd5ea60932ed90607b369ed2017f645afcb5cd07f6896a08473bd5dea2bfb52ac501a39c338ede985aa4a7755db876cbe4d944f3cce0079d2ad9ba8d17f01a614052aadbd4af0fd282f594dc4530ee49b6c9ae6d5d80a073e678594be2e2f0869baa2a58dd2d0f6a995fb706c4d1b618d57da1c2d8f55611f746105a947b4f6bb74dbdbffb1b3c1f2316f6a28a07f0145b1bf8345b6aa4e9d5a819497856792121219ea151c1f8e2f86356439bc5b87fe4cad68b6afa08687e6e751803865165eac0c34bdddae1bbe52f55d08cc4a0865f8df372635e8a26ac4ac9716a124ac4e83349f17b612e2b1893b5eaccecc7d812bb4f4fc6b313f57c2035a90f782a4a97b5f5309b6c5798d72b9187f3d411e84041e3671fe35e39fa1887846721c38d501b471990b919d2ad9ca9bc71157a843d75838c1aa4ff0dabd74284709f1f87f324ec4f56eacd70e6bb5e9c3ff719786c4d4284e4cfdc828e0465ca168d04de1"}]}}}}}}, 0x0) 09:17:11 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000002600)=0x4) 09:17:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x8}, 0x0) 09:17:11 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000002600)=0x4) 09:17:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @rand_addr=0xc0000000}}) 09:17:11 executing program 1: syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast=[0xff, 0x0], @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f042", 0x3f8, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c000005dc791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a805721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee102a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) 09:17:13 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000002600)=0x4) 09:17:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0xffffffffffffff85, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x8, 0x4) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2022) 09:17:13 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000400)="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", 0xfd1}], 0x1}, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x4240a543) splice(r0, 0x0, r2, 0x0, 0x810ee0f, 0x0) 09:17:13 executing program 5: r0 = socket(0x2, 0x3, 0x67) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}}) 09:17:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a60000000af40802"}}}}, 0x8a) 09:17:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a60000000af40802"}}}}, 0x8a) 09:17:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x4, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 09:17:13 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 09:17:13 executing program 5: r0 = socket(0x2, 0x3, 0x67) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}}) 09:17:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x0, 0x280, 0x148, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 09:17:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x4, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 173.707257][ T8503] xt_l2tp: v2 doesn't support IP mode 09:17:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x4, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 09:17:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x4, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 09:17:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200008000c590000010000b000500010007"], 0x1}}, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 174.597821][ T27] audit: type=1804 audit(1589188635.114:3): pid=8522 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/9/cgroup.controllers" dev="sda1" ino=15792 res=1 [ 174.678699][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 09:17:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200008000c590000010000b000500010007"], 0x1}}, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 09:17:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200008000c590000010000b000500010007"], 0x1}}, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 09:17:15 executing program 5: r0 = socket(0x2, 0x3, 0x67) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}}) 09:17:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff52004506000002ffffffd50600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed1}, 0x48) 09:17:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a60000000af40802"}}}}, 0x8a) 09:17:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a60000000af40802"}}}}, 0x8a) 09:17:16 executing program 5: r0 = socket(0x2, 0x3, 0x67) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}}) [ 175.510167][ T27] audit: type=1804 audit(1589188636.034:4): pid=8557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/7/cgroup.controllers" dev="sda1" ino=15793 res=1 09:17:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200008000c590000010000b000500010007"], 0x1}}, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 175.657577][ T27] audit: type=1800 audit(1589188636.034:5): pid=8557 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=15793 res=0 [ 175.681512][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.747873][ T27] audit: type=1804 audit(1589188636.064:6): pid=8555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/7/cgroup.controllers" dev="sda1" ino=15793 res=1 [ 175.834583][ T27] audit: type=1804 audit(1589188636.124:7): pid=8547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/10/cgroup.controllers" dev="sda1" ino=15789 res=1 09:17:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200008000c590000010000b000500010007"], 0x1}}, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 09:17:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff52004506000002ffffffd50600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed1}, 0x48) [ 176.021032][ T27] audit: type=1804 audit(1589188636.544:8): pid=8567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/8/cgroup.controllers" dev="sda1" ino=15793 res=1 [ 176.129404][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff52004506000002ffffffd50600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed1}, 0x48) 09:17:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x6, &(0x7f0000000000), 0x20a154cc) 09:17:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200008000c590000010000b000500010007"], 0x1}}, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 09:17:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff52004506000002ffffffd50600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed1}, 0x48) [ 176.670964][ T27] audit: type=1804 audit(1589188637.194:9): pid=8590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/12/cgroup.controllers" dev="sda1" ino=15789 res=1 09:17:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200008000c590000010000b000500010007"], 0x1}}, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 09:17:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150003008178a8001600050001400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 176.757122][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.938064][ T27] audit: type=1804 audit(1589188637.454:10): pid=8601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/9/cgroup.controllers" dev="sda1" ino=15793 res=1 [ 176.993449][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.091066][ T8599] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.111580][ T8599] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 09:17:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a60000000af40802"}}}}, 0x8a) 09:17:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12abc282c27820fd9118600820e1106001100000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a60000000af40802"}}}}, 0x8a) 09:17:17 executing program 5: unshare(0x2c020400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 09:17:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 09:17:17 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0) 09:17:17 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1e, 0x0, 0x0) [ 177.398669][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:17:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x12, 0x3c, 0x4, 0x29d, 0x0, 0x1}, 0x40) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 177.464074][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 09:17:18 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x5a, 0xa01, 0x0, 0x0, {}, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x3}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 177.516341][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:18 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @dev, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @empty, "abf376e1e7", @random="5588c5ea1ea7", "e00cf3"}}}}, 0x0) 09:17:18 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, {0x12, 0x0, 0x0, @multicast2}}}}}, 0x0) 09:17:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100706965000c000200"], 0x38}}, 0x0) 09:17:18 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0xf8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) [ 177.807096][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.862757][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.882272][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.753255][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.766205][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.781157][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.846551][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.867055][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.876474][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 09:17:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x6, 0x3}, 0x14}}, 0x0) 09:17:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) 09:17:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14}]}, 0x2c}}, 0x0) 09:17:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 09:17:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 09:17:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x56, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 09:17:19 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 179.254294][ T8684] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.306460][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:17:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x56, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 179.355739][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.386086][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000000100), 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 09:17:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x56, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 179.571836][ T8683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.635771][ T8683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.667045][ T8683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:20 executing program 5: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x330, 0x0, 0x0, 0x1c8, 0x0, 0x0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a8, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x21, 0x0, 'syz1\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00', 0x11}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 09:17:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x56, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 179.860548][ T8685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:17:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 179.922651][ T8685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.943440][ T8685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) 09:17:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 180.128625][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:17:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 180.191521][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.204311][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.283739][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 09:17:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:17:20 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 180.389207][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.446442][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.471653][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:17:21 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 180.724832][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:17:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r0, &(0x7f0000000440)="cd", &(0x7f00000005c0)=""/180}, 0x20) [ 180.766347][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.820393][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0xe4ffffff}, [@call]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) 09:17:21 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:17:21 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 09:17:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) [ 181.009910][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.048258][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.098507][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 09:17:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$int_in(r0, 0x5421, 0xfffffffffffffffd) [ 181.297407][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.318743][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.346100][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 09:17:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}]}}}]}, 0x3c}}, 0x0) 09:17:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:17:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010008506000000000000000001000000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 181.524370][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.576663][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.616744][ T8769] IPVS: ftp: loaded support on port[0] = 21 [ 181.624975][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.801334][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.852799][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.881895][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) [ 182.040549][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:17:22 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 182.200988][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.238127][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.260407][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.389526][ T8780] IPVS: ftp: loaded support on port[0] = 21 [ 182.445459][ T8776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.465768][ T8776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.476441][ T8776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:17:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}]}}}]}, 0x3c}}, 0x0) [ 182.578313][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:17:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)='T') 09:17:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}]}}}]}, 0x3c}}, 0x0) 09:17:23 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 09:17:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010008506000000000000000001000000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 09:17:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000c590000010000b040500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007000) 09:17:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}]}}}]}, 0x3c}}, 0x0) [ 183.007582][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.031535][ T8512] tipc: TX() has been purged, node left! 09:17:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 183.119163][ T27] audit: type=1804 audit(1589188643.633:11): pid=8842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/22/cgroup.controllers" dev="sda1" ino=15815 res=1 [ 183.161103][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.691491][ T8839] syz-executor.2 (8839) used greatest stack depth: 23216 bytes left 09:17:25 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:17:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/239, 0x28, 0xef, 0x8}, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:17:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 09:17:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010008506000000000000000001000000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 09:17:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000c590000010000b040500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007000) 09:17:25 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 185.286110][ T8870] BPF:[1] VOLATILE [ 185.288118][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.312107][ T8870] BPF:type_id=0 [ 185.349271][ T8870] BPF: [ 185.359504][ T27] audit: type=1804 audit(1589188645.873:12): pid=8873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/23/cgroup.controllers" dev="sda1" ino=15830 res=1 [ 185.372226][ T8870] BPF:Invalid name [ 185.444362][ T8877] IPVS: ftp: loaded support on port[0] = 21 [ 185.454783][ T8870] BPF: [ 185.454783][ T8870] [ 185.471079][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 09:17:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 09:17:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000c590000010000b040500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007000) 09:17:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010008506000000000000000001000000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 09:17:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 186.000360][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.060975][ T27] audit: type=1804 audit(1589188646.573:13): pid=8905 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/22/cgroup.controllers" dev="sda1" ino=15838 res=1 [ 186.088100][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000c590000010000b040500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007000) 09:17:26 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 186.563985][ T27] audit: type=1804 audit(1589188647.083:14): pid=8924 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/24/cgroup.controllers" dev="sda1" ino=15810 res=1 [ 186.598810][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 09:17:27 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:17:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000c590000010000b040500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007000) 09:17:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff060000000a0000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 09:17:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000c590000010000b040500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007000) 09:17:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 187.055059][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.103036][ T8941] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 187.193828][ T8942] IPVS: ftp: loaded support on port[0] = 21 09:17:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x47}, 0xff11) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x47}, 0xd8) [ 187.279574][ T27] audit: type=1804 audit(1589188647.793:15): pid=8944 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir637984414/syzkaller.d83R89/25/cgroup.controllers" dev="sda1" ino=15840 res=1 [ 187.292448][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 09:17:27 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 187.333540][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.405744][ T27] audit: type=1804 audit(1589188647.843:16): pid=8939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/23/cgroup.controllers" dev="sda1" ino=15833 res=1 09:17:28 executing program 4: r0 = socket(0x25, 0x801, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), 0x4) [ 187.681913][ T8943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:17:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x0) 09:17:28 executing program 0: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 09:17:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe2b, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000c590000010000b040500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100007000) 09:17:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x0) [ 188.173070][ T8983] team0: Device vlan2 is already an upper device of the team interface [ 188.270846][ T27] audit: type=1804 audit(1589188648.793:17): pid=8984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/24/cgroup.controllers" dev="sda1" ino=15836 res=1 [ 188.309239][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:29 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:17:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x0) 09:17:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xf0, 0x0, 0xf0, 0x0, 0xf0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x33}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[], 0xff}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 09:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x2, 0xa, 0xf01, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x0) 09:17:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6c, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0xc) 09:17:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 09:17:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xffffffff}, 0x1c) 09:17:29 executing program 2: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x8d1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r4, r3, 0x0, 0x100000001) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) [ 189.011766][ T8512] tipc: TX() has been purged, node left! 09:17:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x0) 09:17:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6c, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0xc) [ 189.068280][ T9014] IPVS: ftp: loaded support on port[0] = 21 [ 189.140998][ T8512] tipc: TX() has been purged, node left! [ 189.155961][ T9017] team0: Device vlan2 is already an upper device of the team interface 09:17:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6c, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0xc) 09:17:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6c, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0xc) [ 189.341209][ T27] audit: type=1804 audit(1589188649.863:18): pid=9024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir334907553/syzkaller.P3UQSK/14/cgroup.controllers" dev="sda1" ino=15846 res=1 09:17:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6c, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0xc) 09:17:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x1010, 0x464, 0x20, 0x70bd29, 0x25dfdbff, "6ccacb0292ad53c2a772e579213e0c86bedb8e9ab08cbad85f881d0eb37ff74ffad2c17aa9fce08256c8db9206de5d4e79ae23b27440f1b0d0d2ad211695b2af64df837c817033a90f4b2592df34ba589007aad177ebb2bdffaabb786d12e045037617a0819fd10406fcc7c14d05f9be09bac2ec8103f0857b31d5af9201e5533909d8cf98bb3fb59613a0603ed6783d49e4f5567339056cd017848d342d847f41554d5065ccede1aadce0c7a1c28eb74f252c3130d6310191a8a30f7e1f49f9f215ff7fdf23ae735efaed2248503715ff49a2d0766beb03e681f4ae7acff0d4ee4a05da3a2e03c0f57a36db1e68c42633943aff7b7a098235804c39a2ff2d071b76731dcabd148b640ebecdabfd0ad808a0b7eb746385cd0c24fd22a700f62c37597d8e6aa82e828e48f5a04b33b602705057bb1628a9f00a435ee52cb0075fce6f878ff7401fb1c068ffd2e8845f91b7495bf63eac2306aeaf1276bdc5237896bf9c210a5ed20c708cd595bfe0c8dcabf48cfef3bed83b4f6b988e39934d24bda5b69b36fecb952e5c5087262d83e82f787101ac94ca0d2c412e4fc5e98572905d7139d5a4a53af62e70d1623d6b8db58df521806409ec8f6d67e83dcf4e7b95ac9546d9e48d10af3154e6bd39cb1da000f501c4bb17bc1d670cd3f9b6634083ffa0090d535beb5047e00dd7e4c0c9c14f45d8cf645409f7b81953e644a9727c5a6952ab9504abdded8413307efa6d5b5a313d8dc1374ec15fa9c206521c1e198c362e06629fb2e480974444a114590ff03346d656d8c85a2a4327a69313070e48d1614bf254534384300f0a0c8a86ce23da33d4e9257cf5a3f2c038c51fcb5c824ceda4916fca78942933b4c94ce254255a4caec43732948d9b8915b62fc3ae6d6f36fbd4402f032bfd9e6c96e2c6d2e0572bdc27af9b67db7d671dd9dce8c7b2f4f371df3ed95952d30e83804115793a2fe8248861a4e4b1a6dee343836f04cd2e77c1516810e8572eb4ee368e58365899164ac96a084284e1e6e7a28d052679d08ebc0470aecfbdc74aaa72f3ac247855144212bf2c03d4d5143b5c64021f0ea0aaa4bc45ffe5d87fbb1575fbf997a88b9a29dd97955381fc03327a77ed825bda11613b359549ae81f2123e671b67bc5cad9af1658633d82f1214347503a415cb6d75da16cd429006628f6bba469b48474cdc547489d38fbed20e3813a6fc4140a4f1e8748a8ab4719ebd439d276b136dc051295f7bee75b7d134aaf6843cd2b4c4f5dd47c67a8a2ee6bccbb9a0140629865ea4c54b7262102a4e74f5b0365a704f6cfbd96f0367ae66eb7c6b943223a832a094e6ec896cc891d4a7f9d8d5155c3947f795d131ba4766beab1f2f6391cc2235998db77b81e568483b5b4cfdedf4cf15155e9864930c08146b8bbc7d987a7d2387129deffe0d8d332fe4830a96b22bb8e84cb65a73a53852a7e9198f1530200eaea9d46c4cc0bc8a63f191a62def647eb6ee47c7a867b93dfe9818ed785c9fcc78f752fc55827ba8767eeb1b08c56a00f5ddb5ce13e606f7d5fe3752e9ed9ad1c9e30d865ce4eda739dd36a0059bf3e2e0ff517658a3ee5109a66e012e7ecd66283736e9347678f0d961b7b4a2417422f0db43fc86bafb72480405746f188a1acea5a2f1beb1d47acfd2c8e8e5677478b3f708d0a3711b36d9fac4d4108d44389178ce13f527e62b0b47c7167e114dc40f5f5e81b3a07d5b208a4dfd2f620afe7f2a2a5fcd435d1cee6ece9cd2c7c7f676c891e3791f51ff2a022e2c5418d0f7c4b0c674e2fa2ae1f053536e718beb5c61616befc30c910d75455ebe3a7ed6b3198d30670151897bd516eee7be8df17277bf912b9b01aef319bb27e93f44392ee9bf30cca88f4e5ccb03be91be0719a33d27c710c4a02ced9b23a364701c077cc021e08aa32821625bd71e45f293925716c8c8e60518fa62a23274df2b9fc4d07a7653d2735cd569c9f629c9db40e0089bbe80e56a2689b658f5c973104fdc6588760e1c2b99ce30e84ca81a3fdc8d65309be833f721413f34156e11303244c9ed3ccb988e7580544980f60514b57f2cac1b03828494e529c832b3da843f6376238b4dd43884d42851a4c61fb1f357e74545a4b48db4ff28d68e82d4c558256bbbc23bf3f4a36ec6f5db38889ca385cbd034b42d2248e6a64d85857717a32c80434eead8b754e138074e1b731a74c6ce48ebbfebaf6710349b05797fb3e0c38bff2f3b12100349ea4e65b814dd0f5a4e8d8124c4d9b0a3b9e78780570c3b2aa0b6da16c51d52d45cd21f2d39169bd5f0c8767c5430dc7bc84c7567347612a24000ea3515a6c2a35d5434d8a2cf901d7bbec23dfc3a2d99d401e1e4a2267a0d5800eebbd667e5ceff344310d2387a50d1433e4422023290a32f1f9f9108daad57483e224517e4c87a1c6bb673ad231524c93eb3243b7dc78afbb8812584e11ba863e20437f9fc84be8b80e6561cf96153516787d48e34f61d2c561935383c0e258ce8376366612ecffb9f77673c3ad1d963c492df650fd948c0b9af4916e1dc16449f47aa550973f1ee149c038964683bdfa1cf9e7835af01c2544c4bd5247245f8724a8d2e0d84fea36aa14c477ad63a549012b432620373ec7c920d2dae061eff53f506bf0392940d3bf6f1e3f7988c0122c9d9d2ae604aa230dd67b8ed4fef7ef9de7ea6b95851df3b5c25c1688519009216d01655b6bc197c1e17e608bf063aef8ee68c888964d7c072a3a93f1e4a80c7fe807694d36a22d7a781ee40f711f323c8e84b2494ec7b4d6491259a31c3201124275d11476bad914be21272f4909b1d11268011e6908124825c6564eab766e4c76f5e82b2dcb355f3f7a6f85eeaca6084b36d5d65de69d4715911c6a13ec1751b2e84a7a063e56ab0a89a8004be152f5c2054e66423c8b7bec3fe950d88314721cb3e3a333c24a1ef2042ecdb8bc62d7608224d5d00a68874fe3f2d0cb88b9d26d8412d355b8d253f67a56ce692fc90840657a128f84f25052fb1b27ad753b481174fa5a9df1992b20e950f77dbdaecfa812eb3e76798bda4f8db7ebb97da3de48ee6b6edf35659ba100584f384483ba527d4603f0421d291fc2740574c885fb46796304271ec58177eded4e0d425968d1cd24af1a5895010bd1cc431bf877078f8c5c6ede162e382dba4c8db31ae5527cbea006f9b9f85331a7230eeb352d8194b541ae5e77166c6a8d773bdeba522ba2f552c81e720c4272c72f6caa2280f8286e5fe0194fd08667a34bf1dea7ce3ba32124d22bdce9bdd5eccafa5cdfcc953989d1b715fdb4adc43a51a3e716a367e1ac8c3f9bebd0bf70c19a43f2cf34e01053d186b8957c0beac3a4d5299a0c2008d3970fd31fa058d7ba2764649568e6fea1631e9e9b1fe6e1b108dc9be769a5ed720c39798f4b5963b73fd4a577daa8a73b6ddb5aabce4097a1d4ec4b40a25cb129b6bb5915df8a5018adcbf48155aefd789d7d42c81b3e0bfaa2e5f569f7d66736b29c44fade24afb767661e1f6ef705fca339493d667b8c8ab6cb3afb965ee1eb11d17cd1cbf09434329e1dbc4c5263d20a0bd8917bd9d1a22323729a3e0bfa5d4dd7ebda7e40970e8f5be3db3a3a231c32897a4bfc845166d6907bec5f1f8cdab7aeb7de2629a8b1465833efca10b184459b8cf4e1a7df0d0c03f40ea0ef0d3aa84acf2845da642a790d1a45532a5dc9d7ba0ac13b1039e05788e0a8c77016f63a2f7d55dc91ad073dc8b130ebcf18534dad4e29babad27fca6345b79b3afc4d17a54b2a070c26db11e15fa0598669d115300bb39e4d6d9274e891184f3b3acc013de5c3330e348a72907505131fd0c40d1c643b69d5f4b6e706ebbd99a604679b2cf235186e291712405b30a2195b5181508dee25ff0df0aee523bcdf1709e12b29a2d517a60944766038eed9ef4d5d49f106e26d7cf0ec837ae2a1669ecfa9d60a5de5ba9b9c45b797ec088574855d5174f6b15bf63e745c8cae3d340bf757bb5ce21f5cf8662da9e298f2f3ee9bd94995b4d60643d3f53ef973294236cf619b3f557548234f021be749119045a44ed8f6b1d584b067eb5657c76c71061fa091f62c0713bdd7594d01ab71a0ffee76d6436f5ddc4434e8f91c708f7c9ee03d25797a27d790979d7a1743125cc4c4ce042da30fc7db46887ef8f803084b32f600a12bdc631f1f07d677a7d5f86f9f0c52b9c361cf1dd1e95f9c2a81252be377d3e02c048441802c1b4bac54948847678629b8121c0a2f31e3be27c4d69f8b679afadfd94789b63dd5545cfe65764277cc85c57125bf47de30b1a0eb3b8b18f408a306e66ccd959eb8780c385054176d2728c27923b6863f2bbd01e3eeecab47e9a67fc4d5fbad95ea6aac0d244a08aa81049a489ad9831ce8d4ee3f51d5c9bdaac66780c69a7816935cb5bf7ba608c96d63c0d15f29c572258e71772d8a92f226c4d130161bbef7373a22f1969412522a0c32189b6514bdf9c8fe0a812dcaa6159e21957785058b413cfc3a902e2335d8a26e6bdfb6ad93a16e15e4015a0f6d08c355f8ea3c05bf85894e5b3d66150aa01b7266ec9cff6690c7207f561f55c92bc01fa0037c150fa210dd16403d8f31251209e6bf56c14a9f6103378f90d56f1cc153cf2e42d54113436e714b4060909796be7e16b51c3b26766c9c39904253a5b248f87f5a39ba7ea5c6c3fb1c5f16006cde70bc61747c95a42595ee54cba28a195deae74ccda88f86edb3fd3a4e2c98779495c3e3fc5c8b1e277b243e2b33d433e9b1ee941df98d11b3b81e9f2303beb1a8c4fdc7870b91760e1c5e3b5feed3cb598b6cfb6f8d1a1196f6ebb2e7f4771d762d3654901b83d577670d9dfbddaf1c2b8f10f182be9092bbe1e92cf7143bda6437d95b8a4474b4563e615f8fce753e27b68f1ec8b98aea8fa639b5a8d863ca98daa952176c175ce5bf514d06a6f0dc129614c3f64c684c48c16f34863c1c9b1debf438651e1c22a059b5307aa4aaaf49e17756e43b51d2736ffc546ed99ccfd12b9a64cb443a0b5676cc8e467141c373219d35bcf2b2ce4c64fbd8ac951d7924181641338956a926ebefee9423063c7152c24c8d9fc831f8ca1e35cc51dc423b79e5068eb156a74bc44378a1d9276850dc2f7a21c1a0d80c8cf176a5f7b9a9a50f6126724ebb3e0cff4327832bb6c5a8059283564f739dbe5e7065a87717a6347d41e32a9b3a1bf575e386fad1aae6d25c28e3fa7a762fe2aba116488cd24954b668a41e6b938ed21dc7b2eaa1daa35b3ac251721d913a73c1e47a28fd22360f86d05490ee480c51ad30dca7cfad350abef668495ea63a4e8c5363af30b332f4bdfb2971f0156656d9ef39eaabca4e209570f9c3a64b186d3077d8665357190b199824fa85a977c674c9fbb167ace2b8bb67a02450cd885683dcd188e68cc42a6fce9c9c5dc9d33d92845191d8652d2927843b50e5aa23bf77297f1fc945001330a983971cf0db69886ae394e923200169bcba479204b5289714b419397fd5e677814bb548481d74462d33ca5bba029224699ae0f0f471f1f81b924d939885366477070ffbe3a9239ca34c08229065911bca1f8bba1217dfe2a021b393593f8c9640153075889d9b06d9dc4a1cb0cbfb435a869d9b8d4736e0acfac6a95373684902595d03839f46c20d34690cb88bc17c724fd1ab0fdf033d6018c11edd136231038673cd241da15c2a4f315e4ceec205bf7de81292d1484006e64e16763e7609f0fb3e386a9156ce900796db818edf9a3850d", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 09:17:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6c, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0xc) 09:17:30 executing program 0: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 09:17:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4d, 0x0, 0x0, 0x700}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 190.334437][ T9077] team0: Device vlan2 is already an upper device of the team interface 09:17:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x6c, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0xc) 09:17:31 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'tunl0\x00', 'nr0\x00'}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}, {0x0, 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local, @ipv4, [], [], 'veth1_to_bridge\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) [ 190.574281][ T9089] xt_cluster: node mask cannot exceed total number of nodes [ 191.581792][ T0] NOHZ: local_softirq_pending 08 09:17:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000020000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000000dd5f02ec8af4c76f4503775e3a23de02000000c4c5542ae9920f613c03222d6b4a45e81d342c0d7444365cb0cb"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xe60, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 09:17:33 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00f1ff0900010072737670000000002c000200080002"], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x60000000) 09:17:33 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) 09:17:33 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={[], 0x10}, 0xec8, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0xbe66a9025fcd7282, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {0xffe0, 0x2}, {0xd, 0xa}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 09:17:33 executing program 0: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 09:17:33 executing program 2: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x8d1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r4, r3, 0x0, 0x100000001) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) [ 193.481951][ T9106] team0: Device vlan2 is already an upper device of the team interface [ 193.506686][ T8512] tipc: TX() has been purged, node left! 09:17:34 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) [ 193.849999][ T27] audit: type=1804 audit(1589188654.363:19): pid=9115 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir334907553/syzkaller.P3UQSK/15/cgroup.controllers" dev="sda1" ino=15865 res=1 [ 194.056790][ T9128] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 194.103721][ T9128] File: /root/syzkaller-testdir334907553/syzkaller.P3UQSK/15/cgroup.controllers PID: 9128 Comm: syz-executor.2 09:17:34 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) [ 194.206431][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:34 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="76d890b710c37422059f87558c48bd9a67496b19f93a17336296289267fcf6b57aff0e64d9559b3fa6c9f02e6427067c60f3049bcca2cc6c0c58c26a93dbc608c51472dd05d457ef64574b4ab0d47860") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed={[], 0x10}, 0xec8, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES64=r0, @ANYBLOB="000000923503000000000080f04fdd02927c59d3eea00f312f0012800a00fb"], 0x3}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r4, 0x0) r5 = accept(r4, 0x0, 0x0) shutdown(r5, 0x1) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@bcast, @null, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 194.387726][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4e98}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', r4}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601030000001bd3001b00400000000000000005"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100000001) accept4$rose(r1, 0x0, &(0x7f0000000140), 0x80000) recvmmsg(r5, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:17:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) shutdown(r1, 0x1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0xa8000000, &(0x7f0000000140)="53787cc15e0bcfe847a071") r3 = socket(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x47}, 0xff11) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x47}, 0xd8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x0, 0x5, 0x0, r6}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r6, 0x4}, 0x8) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e20}, 0x10) 09:17:35 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) [ 194.731770][ T27] audit: type=1804 audit(1589188655.253:20): pid=9175 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir251400920/syzkaller.00hsdu/30/cgroup.controllers" dev="sda1" ino=15871 res=1 09:17:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000020000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000000dd5f02ec8af4c76f4503775e3a23de02000000c4c5542ae9920f613c03222d6b4a45e81d342c0d7444365cb0cb"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xe60, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 194.807119][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x2, 0x2, 0x201}, 0x14}}, 0x0) 09:17:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 09:17:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000020000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000000dd5f02ec8af4c76f4503775e3a23de02000000c4c5542ae9920f613c03222d6b4a45e81d342c0d7444365cb0cb"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xe60, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 09:17:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="2e00000010008100000f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e000a6c40fe00ff050005001201", 0x2e}], 0x1}, 0x0) [ 196.106420][ T9210] 8021q: adding VLAN 0 to HW filter on device team0 09:17:38 executing program 2: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x8d1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r4, r3, 0x0, 0x100000001) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) 09:17:38 executing program 0: mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 09:17:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 09:17:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e51d2a112668d", 0x94}, {&(0x7f0000001780)="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", 0x395}, {&(0x7f0000000300)="0ebbb218be8d3954e135df5f396071992eaf48c6be4575b2cd72c05da2dcf622ab81bfb5e04f14d17c07fe83b1e0455bfd319b6812e89ad48e9467125948fbe0fd43d11c277ad671710da0a26430", 0x4e}], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 09:17:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="2e00000010008100000f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e000a6c40fe00ff050005001201", 0x2e}], 0x1}, 0x0) 09:17:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000020000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000000dd5f02ec8af4c76f4503775e3a23de02000000c4c5542ae9920f613c03222d6b4a45e81d342c0d7444365cb0cb"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xe60, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 197.606641][ T9232] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.642352][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 09:17:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="2e00000010008100000f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e000a6c40fe00ff050005001201", 0x2e}], 0x1}, 0x0) 09:17:38 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e0, 0x0) 09:17:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 198.042715][ T27] audit: type=1804 audit(1589188658.563:21): pid=9240 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir334907553/syzkaller.P3UQSK/16/cgroup.controllers" dev="sda1" ino=15862 res=1 09:17:38 executing program 0: [ 198.257094][ T9257] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.284195][ T9245] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 198.296374][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 09:17:38 executing program 0: 09:17:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e51d2a112668d", 0x94}, {&(0x7f0000001780)="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", 0x395}, {&(0x7f0000000300)="0ebbb218be8d3954e135df5f396071992eaf48c6be4575b2cd72c05da2dcf622ab81bfb5e04f14d17c07fe83b1e0455bfd319b6812e89ad48e9467125948fbe0fd43d11c277ad671710da0a26430", 0x4e}], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 198.385796][ T9245] File: /root/syzkaller-testdir334907553/syzkaller.P3UQSK/16/cgroup.controllers PID: 9245 Comm: syz-executor.2 09:17:39 executing program 2: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x8d1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r4, r3, 0x0, 0x100000001) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) 09:17:39 executing program 3: 09:17:39 executing program 4: 09:17:39 executing program 5: 09:17:39 executing program 0: 09:17:39 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) 09:17:39 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 09:17:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[], 0x8) ioctl$TUNSETFILTEREBPF(r0, 0x6628, 0x0) 09:17:39 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2}, 0x8) 09:17:39 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 09:17:39 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x3, @local}, @source_quench={0x5, 0x0, 0x0, 0x2c00, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) [ 199.243026][ T27] audit: type=1804 audit(1589188659.763:22): pid=9290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir334907553/syzkaller.P3UQSK/17/cgroup.controllers" dev="sda1" ino=15895 res=1 09:17:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e51d2a112668d", 0x94}, {&(0x7f0000001780)="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", 0x395}, {&(0x7f0000000300)="0ebbb218be8d3954e135df5f396071992eaf48c6be4575b2cd72c05da2dcf622ab81bfb5e04f14d17c07fe83b1e0455bfd319b6812e89ad48e9467125948fbe0fd43d11c277ad671710da0a26430", 0x4e}], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 199.409039][ T9290] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 199.466142][ T9290] File: /root/syzkaller-testdir334907553/syzkaller.P3UQSK/17/cgroup.controllers PID: 9290 Comm: syz-executor.2 09:17:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[], 0x8) ioctl$TUNSETFILTEREBPF(r0, 0x6628, 0x0) 09:17:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 09:17:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x2, 0x0, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 09:17:40 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) 09:17:40 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:40 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast=[0xff, 0xff, 0x0], @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5538cb", 0x0, 0x84, 0x0, @private2, @ipv4={[], [], @loopback}, [], "5e83200bdf6b3af1"}}}}}}}, 0x0) 09:17:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000026000102"], 0x24}}, 0x0) 09:17:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:17:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0xb9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) accept$inet6(r0, 0x0, 0x0) 09:17:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x6, 0x0, 0x0, 0x308, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf9, 0x0, [], "3b719ecebd41067eb05e09403f5b8b35b65e1e079d28fa34c4a43c9484cf53c21a5fa08b6406c67251861bf99308b609c0fc87793143dadc181578c7201db0dfcb6caba6a091294718ffdfc7d98d1245b2bf9f0ce8d60d187d2d6e63e2db27879e49b5e252437db2e3c5c0598effd49209cee1ca27b7c2bfac2292f2d80776e258e38558de60612884b364921096bd78cdf103def7740f5ac980534547774dbde28ccb89203658849fc5ca3257ce1899ec5db1e47576fde2cb4f1ce2ad11b68ec510873a08840f17d1a688672837b82a06cfabeb01685611f97d9c6eaabe1d3fb98426eb6a1e0f28ea354a304e029d44cb309a2411d46eaed1"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "9fa776cad15bdfa7f7c382034d1337ffb95c40240b0a3c35af307f807710feebc221690d7c950d08371c6b8a2ba3ebcfa28502babc10c888873d196009323243dc260bb3a1c7488c2a0621ae316bfa9bf3c48c0a114478c1829ac085bb6f64002f2f2d9f6df81b03aa5cb78b86cd58e7fc30d9b42419baee1eebe82571f06a5bf28a94c3b2de6d7f4d8aa6c9e3080d60a435d1dbc32abaecb47abc4c6bbe76c151bc1d7c3f341182c89e9ebdf94f2f0080e37e7fa9186268a061f23ffa9302c142ea2442ab4b7dbc1fc9bb6f8fb5ec20cc49"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "2cc401cc595250e02a639dd8e171e580b1f70606144e2ef5e696c87f8559d3fb24393e47c796d9ebdf964735a5a70a31820ea8e44364391caac59a2ac2bbb1c7faba23cd837d53501e829103188976c8d49d99937e014889b912ef5bac966f0a683884b183ded11e652a2e24616c977aef562e056f3001404af6ac491beab43465c6374279e6016bd5d7"}, {}, {}, {0x8, 0x6558, 0x0, "84afec4e1b381b360ee014007baa05189fb33a0802cc95a4275ff2407a91cd0881f367a7642ccab7ea751ebccb2a1c6f4e86a2caa54bacf467c1af6fe5675b9013c8321649c3d27cfb5bf9d46271fcceccd83668d5cffe25c9f234"}}}}}, 0x312) [ 200.141093][ T9342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:17:40 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f6800fe01b2a4a280930a060001fe80000214000000390009002d00", 0x22}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000001500070500e80000004c030502", 0x11) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f3, 0x0) 09:17:40 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:40 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x58}}, 0x0) 09:17:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xc}]}}, &(0x7f0000000300)=""/250, 0x26, 0xfa, 0x8}, 0x20) 09:17:40 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020f000002"], 0x10}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) [ 200.377139][ T9360] BPF:[1] FUNC (anon) [ 200.385084][ T9360] BPF:type_id=0 [ 200.388791][ T9360] BPF: [ 200.392265][ T9360] BPF:Invalid name [ 200.396204][ T9360] BPF: [ 200.396204][ T9360] [ 200.409948][ T9360] BPF:[1] FUNC (anon) [ 200.419208][ T9360] BPF:type_id=0 [ 200.425092][ T9360] BPF: [ 200.431588][ T9360] BPF:Invalid name [ 200.440728][ T9360] BPF: [ 200.440728][ T9360] 09:17:41 executing program 5: 09:17:41 executing program 5: 09:17:41 executing program 5: 09:17:41 executing program 5: 09:17:41 executing program 5: 09:17:41 executing program 5: [ 200.926917][ T9361] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:42 executing program 0: 09:17:42 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:42 executing program 5: 09:17:42 executing program 3: 09:17:42 executing program 2: 09:17:42 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f6800fe01b2a4a280930a060001fe80000214000000390009002d00", 0x22}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000001500070500e80000004c030502", 0x11) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f3, 0x0) 09:17:42 executing program 5: [ 201.806652][ T9474] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:42 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) close(r0) 09:17:42 executing program 0: 09:17:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x4008800, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:17:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="18000000560007031dfffd946f6105000700000400000000", 0x18}], 0x1}, 0x0) 09:17:42 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000007060901f7990dff8dae0abbf6ff04600c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x47fe0, 0x0) 09:17:42 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) close(r0) 09:17:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000001680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @remote}}}}}}, 0x4a) 09:17:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000140)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x80, 0x0}}], 0x1, 0x0) 09:17:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000007060101f7004bffddffff3ef6f706000c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x47fde, 0x0) [ 202.196647][ T9493] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 09:17:42 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) close(r0) [ 202.239512][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 202.285684][ T9493] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 09:17:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='J'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28}]}}]}, 0x58}}, 0x0) 09:17:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xe0, 0xc0, 0x0, 0x0, 0x0, 0x198, 0x1a0, 0x1a0, 0x198, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'ipvlan1\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'H.245\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) [ 202.341159][ T9504] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 202.378896][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.425626][ T9504] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 202.439735][ T9509] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 09:17:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0) 09:17:43 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffdc00000000000000000020fff7", @ANYRES32=r4], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 09:17:43 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x8, "9787953640e1"}]}}}}}}}, 0x0) 09:17:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @dev}, 0xc) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) 09:17:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x8, "9787953640e1"}]}}}}}}}, 0x0) [ 203.290098][ T9529] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'. 09:17:43 executing program 2: 09:17:43 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x8, "9787953640e1"}]}}}}}}}, 0x0) 09:17:43 executing program 5: 09:17:43 executing program 0: 09:17:43 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:44 executing program 2: 09:17:44 executing program 5: 09:17:44 executing program 3: 09:17:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x8, "9787953640e1"}]}}}}}}}, 0x0) 09:17:44 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:44 executing program 0: 09:17:44 executing program 5: 09:17:44 executing program 2: 09:17:44 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 09:17:44 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(0xffffffffffffffff) 09:17:44 executing program 0: 09:17:44 executing program 3: 09:17:44 executing program 2: 09:17:44 executing program 5: 09:17:44 executing program 3: 09:17:44 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 09:17:44 executing program 0: 09:17:44 executing program 2: 09:17:44 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(0xffffffffffffffff) 09:17:44 executing program 5: 09:17:44 executing program 3: 09:17:44 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 09:17:44 executing program 0: 09:17:44 executing program 5: 09:17:44 executing program 2: 09:17:44 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(0xffffffffffffffff) 09:17:44 executing program 2: 09:17:44 executing program 3: 09:17:44 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:44 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}]}}}}}}}, 0x0) 09:17:44 executing program 0: 09:17:44 executing program 5: 09:17:44 executing program 2: 09:17:44 executing program 3: 09:17:45 executing program 0: 09:17:45 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}]}}}}}}}, 0x0) 09:17:45 executing program 5: 09:17:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:45 executing program 2: 09:17:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/25, 0x19}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{}, {}, {}, {}, {r2}], 0x5, 0x3e) shutdown(r1, 0x0) 09:17:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/29, 0x1d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcd4e, 0x0, 0x0, 0x800e00595) shutdown(r0, 0x0) shutdown(r1, 0x0) 09:17:45 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}]}}}}}}}, 0x0) 09:17:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/25, 0x19}], 0x100000000000001e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x3e) shutdown(r1, 0x0) 09:17:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/25, 0x19}], 0x100000000000001e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{}, {r2}], 0x2, 0x3e) shutdown(r1, 0x0) 09:17:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:45 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x2}]}}}}}}}, 0x0) 09:17:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/25, 0x19}], 0x100000000000001e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) poll(&(0x7f0000000140)=[{}, {}], 0x2, 0x3e) shutdown(r1, 0x0) 09:17:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{}, {r2}], 0x2, 0x3e) shutdown(r1, 0x0) 09:17:45 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1600000016008105e00f80e045e4b37c4cb33fab463c", 0x16}], 0x1, 0x0, 0x0, 0xa00}, 0x0) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 09:17:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f0000000080)={0x7, 0x0}, 0x10) close(r0) 09:17:45 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x2}]}}}}}}}, 0x0) 09:17:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:45 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1600000016008105e00f80e045e4b37c4cb33fab463c", 0x16}], 0x1, 0x0, 0x0, 0xa00}, 0x0) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 09:17:45 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x2}]}}}}}}}, 0x0) 09:17:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 09:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 09:17:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) 09:17:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 09:17:46 executing program 1: syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "918595048b070df0eb91cf2733fdd5c0"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x12, "fb6ace4b231ee7855beb49c32b4906e4"}, @exp_fastopen={0xfe, 0x12, 0xf989, "f31faef630628f5996e94b218437"}, @generic={0x0, 0x5, "978795"}]}}}}}}}, 0x0) 09:17:46 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) 09:17:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 205.615318][ T9672] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 205.627072][ T9672] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 205.635501][ T9672] CPU: 0 PID: 9672 Comm: syz-executor.0 Not tainted 5.7.0-rc4-syzkaller #0 [ 205.644095][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.654201][ T9672] RIP: 0010:erspan_validate+0x89/0x380 [ 205.659669][ T9672] Code: c1 ea 03 80 3c 02 00 0f 85 c5 02 00 00 4c 8b a3 b0 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 9c 02 00 00 [ 205.679283][ T9672] RSP: 0018:ffffc90004a07188 EFLAGS: 00010247 [ 205.685357][ T9672] RAX: dffffc0000000000 RBX: ffff8880a2a79c00 RCX: ffffc90002099000 [ 205.693335][ T9672] RDX: 0000000000000000 RSI: ffffffff86b2cf3a RDI: 0000000000000004 [ 205.701314][ T9672] RBP: 0000000000000000 R08: ffff88805c5fc2c0 R09: ffff8880a2a79c00 [ 205.709291][ T9672] R10: ffff8880a2a79cc7 R11: ffffed101454f398 R12: 0000000000000000 [ 205.717263][ T9672] R13: ffffc90004a07888 R14: ffffc90004a07428 R15: dffffc0000000000 [ 205.725259][ T9672] FS: 00007fa4368d8700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 205.734190][ T9672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.740787][ T9672] CR2: 0000001b2bf21000 CR3: 00000000970b5000 CR4: 00000000001406f0 [ 205.748768][ T9672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.756754][ T9672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.764727][ T9672] Call Trace: [ 205.768036][ T9672] ? ipgre_tap_validate+0x240/0x240 [ 205.773244][ T9672] __rtnl_newlink+0x526/0x1590 [ 205.778024][ T9672] ? rtnl_link_unregister+0x240/0x240 [ 205.783405][ T9672] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 205.789831][ T9672] ? is_bpf_text_address+0xcb/0x160 [ 205.795034][ T9672] ? kernel_text_address+0x6e/0xe0 [ 205.800150][ T9672] ? __kernel_text_address+0x9/0x30 [ 205.807458][ T9672] ? unwind_get_return_address+0x5a/0xa0 [ 205.813131][ T9672] ? profile_setup.cold+0xc1/0xc1 [ 205.818167][ T9672] ? arch_stack_walk+0x84/0xd0 [ 205.822945][ T9672] ? stack_trace_save+0x8c/0xc0 [ 205.827813][ T9672] ? stack_trace_consume_entry+0x160/0x160 [ 205.833657][ T9672] ? rtnl_newlink+0x46/0xa0 [ 205.838175][ T9672] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 205.843735][ T9672] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 205.849730][ T9672] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 205.855557][ T9672] rtnl_newlink+0x64/0xa0 [ 205.859903][ T9672] ? __rtnl_newlink+0x1590/0x1590 [ 205.864945][ T9672] rtnetlink_rcv_msg+0x44e/0xad0 [ 205.869894][ T9672] ? rtnl_bridge_getlink+0x870/0x870 [ 205.875190][ T9672] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 205.880487][ T9672] ? __copy_skb_header+0x250/0x5b0 [ 205.886567][ T9672] ? skb_splice_bits+0x1a0/0x1a0 [ 205.891519][ T9672] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 205.897372][ T9672] ? kmem_cache_alloc+0x261/0x740 [ 205.902407][ T9672] netlink_rcv_skb+0x15a/0x410 [ 205.907218][ T9672] ? rtnl_bridge_getlink+0x870/0x870 [ 205.912507][ T9672] ? netlink_ack+0xa10/0xa10 [ 205.917111][ T9672] netlink_unicast+0x537/0x740 [ 205.921884][ T9672] ? netlink_attachskb+0x810/0x810 [ 205.926996][ T9672] ? _copy_from_iter_full+0x25c/0x870 [ 205.932374][ T9672] ? __phys_addr_symbol+0x2c/0x70 [ 205.937404][ T9672] ? __check_object_size+0x171/0x437 [ 205.942697][ T9672] netlink_sendmsg+0x882/0xe10 [ 205.947474][ T9672] ? aa_af_perm+0x260/0x260 [ 205.951986][ T9672] ? netlink_unicast+0x740/0x740 [ 205.956938][ T9672] ? netlink_unicast+0x740/0x740 [ 205.961882][ T9672] sock_sendmsg+0xcf/0x120 [ 205.966334][ T9672] ____sys_sendmsg+0x6bf/0x7e0 [ 205.971111][ T9672] ? kernel_sendmsg+0x50/0x50 [ 205.975827][ T9672] ___sys_sendmsg+0x100/0x170 [ 205.980512][ T9672] ? sendmsg_copy_msghdr+0x70/0x70 [ 205.985631][ T9672] ? __fget_files+0x32f/0x500 [ 205.990422][ T9672] ? ksys_dup3+0x3c0/0x3c0 [ 205.994845][ T9672] ? __fget_light+0x20e/0x270 [ 205.999593][ T9672] __sys_sendmsg+0xec/0x1b0 [ 206.004153][ T9672] ? __sys_sendmsg_sock+0xb0/0xb0 [ 206.009159][ T9672] ? __x64_sys_futex+0x380/0x4f0 [ 206.014083][ T9672] ? trace_hardirqs_off_caller+0x55/0x230 [ 206.019795][ T9672] ? do_syscall_64+0x21/0x7d0 [ 206.024610][ T9672] do_syscall_64+0xf6/0x7d0 [ 206.029111][ T9672] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 206.035052][ T9672] RIP: 0033:0x45c829 [ 206.038930][ T9672] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.058607][ T9672] RSP: 002b:00007fa4368d7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.067016][ T9672] RAX: ffffffffffffffda RBX: 0000000000500ce0 RCX: 000000000045c829 [ 206.074991][ T9672] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 206.082969][ T9672] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 206.090933][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 206.098895][ T9672] R13: 0000000000000a04 R14: 00000000004ccbcc R15: 00007fa4368d86d4 [ 206.106853][ T9672] Modules linked in: [ 206.116129][ T9672] ---[ end trace baa85badf357ac00 ]--- [ 206.122806][ T9672] RIP: 0010:erspan_validate+0x89/0x380 [ 206.128385][ T9672] Code: c1 ea 03 80 3c 02 00 0f 85 c5 02 00 00 4c 8b a3 b0 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 9c 02 00 00 [ 206.162931][ T9672] RSP: 0018:ffffc90004a07188 EFLAGS: 00010247 [ 206.175845][ T9672] RAX: dffffc0000000000 RBX: ffff8880a2a79c00 RCX: ffffc90002099000 [ 206.194051][ T9672] RDX: 0000000000000000 RSI: ffffffff86b2cf3a RDI: 0000000000000004 [ 206.216379][ T9672] RBP: 0000000000000000 R08: ffff88805c5fc2c0 R09: ffff8880a2a79c00 [ 206.234453][ T9672] R10: ffff8880a2a79cc7 R11: ffffed101454f398 R12: 0000000000000000 [ 206.251478][ T9672] R13: ffffc90004a07888 R14: ffffc90004a07428 R15: dffffc0000000000 [ 206.268851][ T9672] FS: 00007fa4368d8700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 206.288962][ T9672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.302331][ T9672] CR2: 00007fbe3aa0b000 CR3: 00000000970b5000 CR4: 00000000001406f0 [ 206.312330][ T9672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.322890][ T9672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.331301][ T9672] Kernel panic - not syncing: Fatal exception [ 206.338738][ T9672] Kernel Offset: disabled [ 206.343056][ T9672] Rebooting in 86400 seconds..