[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.078287][ T26] audit: type=1800 audit(1570401046.941:25): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.099797][ T26] audit: type=1800 audit(1570401046.951:26): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.159588][ T26] audit: type=1800 audit(1570401046.951:27): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. 2019/10/06 22:30:56 fuzzer started 2019/10/06 22:30:59 dialing manager at 10.128.0.26:46035 2019/10/06 22:30:59 syscalls: 1018 2019/10/06 22:30:59 code coverage: enabled 2019/10/06 22:30:59 comparison tracing: enabled 2019/10/06 22:30:59 extra coverage: extra coverage is not supported by the kernel 2019/10/06 22:30:59 setuid sandbox: enabled 2019/10/06 22:30:59 namespace sandbox: enabled 2019/10/06 22:30:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/06 22:30:59 fault injection: enabled 2019/10/06 22:30:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/06 22:30:59 net packet injection: enabled 2019/10/06 22:30:59 net device setup: enabled 2019/10/06 22:30:59 concurrency sanitizer: /proc/kcsaninfo does not exist 22:31:56 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r0, 0xd}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='memory.events\x00\x12\xed)\xaf\xf9\x1e=8\xcd\x04\xacI\x8c\xc1o\xd8<\xd3\xd2\v\x9a\xf5\x1b13\xb7N\xa2\xa6@\x856u{G\xeewq\x16\x14\xf0^\xa2\xd6\xd4N_1*\x85\x13\x956\xbbs^Uc\xdb\x84\xd8\xd8\b,eC\xcc8\a\x89\xdc\x12\x84\xbaw\xb2q\x13o\xe02R\xf5J\x84\xc3U\xd1U\xbf\xa6\xff\x17\x8c\\!D\xd1A\x9a,\vJ\x82\xe3\x1c\xc5\xa6\x9c1\xba\xf2\'\xa7\x95\r\rL\x9e\xf0;\x16b_\xb6\xddK\x05/\xa8_2\xeb4\xbb\xba\xb6e\xf7\xec\a\x10\xf4*\xa1\xce\xa6\xbf\x01\xdb rejected, illegal name [ 132.971427][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 22:32:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x608}]}]}, 0x24}}, 0x0) 22:32:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2c}]}, &(0x7f0000001840)='GPL\x00'}, 0x48) [ 133.013259][ T8975] Enabling of bearer <:vcan0> rejected, illegal name 22:32:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000000)="240000001a005f3814f9f407000904018000000000000000000000000300030040000000", 0x24) 22:32:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r1, 0x909, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'', 0x3a, 'vcan0\x00'}}}}}, 0x30}}, 0x0) 22:32:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 22:32:03 executing program 3: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4101100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) [ 133.204945][ T8991] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 133.233074][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 133.246864][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:32:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x576, 0x400000fc, 0x0) [ 133.292021][ T8993] Enabling of bearer <:vcan0> rejected, illegal name [ 133.308326][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:32:03 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000240)={{}, 0x20}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:32:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2c}]}, &(0x7f0000001840)='GPL\x00'}, 0x48) 22:32:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r1, 0x909, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'', 0x3a, 'vcan0\x00'}}}}}, 0x30}}, 0x0) 22:32:03 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x4557434d) pread64(r0, &(0x7f0000000000)=""/30, 0xfffffffffffffde3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xffffff19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 22:32:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000000)="240000001a005f3814f9f407000904018000000000000000000000000300030040000000", 0x24) [ 133.483829][ T9010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 22:32:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x576, 0x400000fc, 0x0) [ 133.585495][ T9010] Enabling of bearer <:vcan0> rejected, illegal name [ 133.615502][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:32:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2c}]}, &(0x7f0000001840)='GPL\x00'}, 0x48) 22:32:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r1, 0x909, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'', 0x3a, 'vcan0\x00'}}}}}, 0x30}}, 0x0) 22:32:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000000)="240000001a005f3814f9f407000904018000000000000000000000000300030040000000", 0x24) [ 133.826550][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 22:32:03 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x4557434d) pread64(r0, &(0x7f0000000000)=""/30, 0xfffffffffffffde3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xffffff19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 22:32:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x576, 0x400000fc, 0x0) 22:32:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2c}]}, &(0x7f0000001840)='GPL\x00'}, 0x48) [ 133.910914][ T9038] Enabling of bearer <:vcan0> rejected, illegal name [ 133.942013][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:32:04 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000240)={{}, 0x20}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:32:04 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000000)="240000001a005f3814f9f407000904018000000000000000000000000300030040000000", 0x24) 22:32:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab", 0x1) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000023c0)=""/4096, 0x34000}], 0x1}, 0x0) 22:32:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x576, 0x400000fc, 0x0) 22:32:04 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x4557434d) pread64(r0, &(0x7f0000000000)=""/30, 0xfffffffffffffde3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xffffff19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 134.518447][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:32:04 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000240)={{}, 0x20}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:32:04 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r0]]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe(&(0x7f0000000200)) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000000)) 22:32:04 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r0]]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe(&(0x7f0000000200)) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000000)) 22:32:04 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x4557434d) pread64(r0, &(0x7f0000000000)=""/30, 0xfffffffffffffde3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xffffff19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 22:32:04 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r0]]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe(&(0x7f0000000200)) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000000)) 22:32:05 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r0]]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe(&(0x7f0000000200)) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000000)) 22:32:05 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000240)={{}, 0x20}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:32:05 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab", 0x1) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000023c0)=""/4096, 0x34000}], 0x1}, 0x0) 22:32:05 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:05 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:05 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000240)={{}, 0x20}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:32:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab", 0x1) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000023c0)=""/4096, 0x34000}], 0x1}, 0x0) 22:32:06 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:06 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:06 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:06 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000240)={{}, 0x20}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:32:06 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000240)={{}, 0x20}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:32:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab", 0x1) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000023c0)=""/4096, 0x34000}], 0x1}, 0x0) 22:32:07 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:07 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:07 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0xfffffe14) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:32:07 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x3e2, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c10900ffffff89fff1fe141aac141412e0000001f5de6a0c15961ff499f27015a1f00ffb661be6e7", 0x5c4}], 0x1}, 0x0) 22:32:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8d"], 0x1}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 22:32:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x1}, @ptr]}, {0x0, [0x5f]}}, &(0x7f0000000700)=""/220, 0x33, 0xdc, 0x1}, 0x20) 22:32:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8d"], 0x1}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 22:32:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x1}, @ptr]}, {0x0, [0x5f]}}, &(0x7f0000000700)=""/220, 0x33, 0xdc, 0x1}, 0x20) 22:32:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x1}, @ptr]}, {0x0, [0x5f]}}, &(0x7f0000000700)=""/220, 0x33, 0xdc, 0x1}, 0x20) 22:32:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8d"], 0x1}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 22:32:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x1}, @ptr]}, {0x0, [0x5f]}}, &(0x7f0000000700)=""/220, 0x33, 0xdc, 0x1}, 0x20) 22:32:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8d"], 0x1}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 22:32:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept$inet(r0, &(0x7f00000002c0), &(0x7f0000000300)=0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340)={0x3, 0x7fffffff, 0x2, 0xe1a5, 0x7}, 0x14) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x14f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000980)="0af51f023c123f3188a05a8fddeb3e70") sendmsg$nl_xfrm(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x200003, 0x7ff}, 0x10) 22:32:08 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000000)=0x8) [ 138.445563][ T9217] IPVS: ftp: loaded support on port[0] = 21 22:32:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:32:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 22:32:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8}]}}]}, 0x38}}, 0x0) 22:32:08 executing program 0: r0 = socket$kcm(0x10, 0x20000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="d800000018008106e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc0009007c00069903000000050005000700812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f1089b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87f5730d16b8683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40ff040000e04adcdf634c0285dc4fc82a9ecbee5de6e4edee3d93452a92954b43370e970300000000b818b824f9cb1337a0d8d0d1e1c0", 0xd8}], 0x1}, 0x0) 22:32:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgrou\x8a7\x95\xc8\xf9\xff \xf6\xbd', 0xea02ffe0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x9011, r1, 0x0) 22:32:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8}]}}]}, 0x38}}, 0x0) 22:32:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 138.667129][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 138.667143][ T26] audit: type=1800 audit(1570401128.531:31): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16547 res=0 22:32:08 executing program 0: r0 = socket$kcm(0x10, 0x20000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="d800000018008106e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc0009007c00069903000000050005000700812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f1089b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87f5730d16b8683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40ff040000e04adcdf634c0285dc4fc82a9ecbee5de6e4edee3d93452a92954b43370e970300000000b818b824f9cb1337a0d8d0d1e1c0", 0xd8}], 0x1}, 0x0) 22:32:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 138.734206][ T26] audit: type=1800 audit(1570401128.541:32): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16547 res=0 22:32:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgrou\x8a7\x95\xc8\xf9\xff \xf6\xbd', 0xea02ffe0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x9011, r1, 0x0) 22:32:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8}]}}]}, 0x38}}, 0x0) [ 138.946503][ T26] audit: type=1800 audit(1570401128.811:33): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16531 res=0 [ 139.069034][ T26] audit: type=1800 audit(1570401128.831:34): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16531 res=0 [ 139.396847][ T9218] IPVS: ftp: loaded support on port[0] = 21 22:32:09 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000000)=0x8) 22:32:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:32:09 executing program 0: r0 = socket$kcm(0x10, 0x20000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="d800000018008106e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc0009007c00069903000000050005000700812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f1089b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87f5730d16b8683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40ff040000e04adcdf634c0285dc4fc82a9ecbee5de6e4edee3d93452a92954b43370e970300000000b818b824f9cb1337a0d8d0d1e1c0", 0xd8}], 0x1}, 0x0) 22:32:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8}]}}]}, 0x38}}, 0x0) 22:32:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgrou\x8a7\x95\xc8\xf9\xff \xf6\xbd', 0xea02ffe0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x9011, r1, 0x0) 22:32:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 139.719201][ T26] audit: type=1800 audit(1570401129.581:35): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16579 res=0 22:32:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:32:09 executing program 0: r0 = socket$kcm(0x10, 0x20000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="d800000018008106e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc0009007c00069903000000050005000700812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f1089b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87f5730d16b8683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40ff040000e04adcdf634c0285dc4fc82a9ecbee5de6e4edee3d93452a92954b43370e970300000000b818b824f9cb1337a0d8d0d1e1c0", 0xd8}], 0x1}, 0x0) 22:32:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgrou\x8a7\x95\xc8\xf9\xff \xf6\xbd', 0xea02ffe0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x9011, r1, 0x0) [ 139.767909][ T9273] IPVS: ftp: loaded support on port[0] = 21 [ 139.775120][ T26] audit: type=1800 audit(1570401129.611:36): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16579 res=0 22:32:09 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000000)=0x8) [ 139.956678][ T26] audit: type=1800 audit(1570401129.821:37): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16579 res=0 22:32:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 22:32:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000fc0)={0x14, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 140.066234][ T26] audit: type=1800 audit(1570401129.861:38): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=6367726F758A3795C8F9FF20F6BD dev="sda1" ino=16579 res=0 [ 140.071329][ T9287] IPVS: ftp: loaded support on port[0] = 21 22:32:10 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000000)=0x8) 22:32:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503863c06063e0000000200c52cf7c25975e605b02f08067f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 22:32:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="23419f650998fb3bf244c7b9c13a8f344a6d020bee9d40779d6db5cb6ab7804996e237e0c6b660fd40baf9379a821864318a34aa56933d91d19d630c63cf45762a49df2490952b5f008cfce7ee9fe2d891c11e3a42ebdcaa16ecdf348f752b3faac387522cfd87bf57651c6579637b35fe7ed2192e", 0x75}, {&(0x7f0000000440)="580128855084fd27da50d3", 0xb}], 0x2}, 0x0) 22:32:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000fc0)={0x14, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:32:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x8006f]}}, &(0x7f0000000200)=""/192, 0x3b, 0xc0, 0x1}, 0x20) 22:32:10 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x27d) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xfffffffffffffffb, 0x32, 0xffffffffffffffff, 0x0) 22:32:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/11, 0xb, 0x7ffffffffffffffc) [ 140.834221][ T9317] IPVS: ftp: loaded support on port[0] = 21 22:32:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503863c06063e0000000200c52cf7c25975e605b02f08067f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 22:32:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000fc0)={0x14, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:32:10 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000000)=0x8) 22:32:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x13, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f0000000040)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff3e}, 0x48) 22:32:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503863c06063e0000000200c52cf7c25975e605b02f08067f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) [ 141.193475][ T9336] IPVS: ftp: loaded support on port[0] = 21 22:32:11 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000000)=0x8) 22:32:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000fc0)={0x14, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:32:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 22:32:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503863c06063e0000000200c52cf7c25975e605b02f08067f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 22:32:11 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x27d) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xfffffffffffffffb, 0x32, 0xffffffffffffffff, 0x0) 22:32:11 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000001000800120000000100000000000000000006000000000000000000000800000200e00040e0ff00000000000000000000000000ada800800400004015000000000003000600df120000020000809014ffbbf00000000000000003000500000100000200423b30632bd7b820000000000003"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300001b000000020000000000000005000600008000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89cc4b20002a12ba71996d8ee637819b39ac1ec3d95c9a0af6fa7fe174e404721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b73383b717e127c6a36da871a86cc8c8dfa870000000002000100000000000000020080dfffff05000500000000000a000000def7bd3e10c05ce0099e088c374525b1f361d6c7358f00000000fe04"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x4000060, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 22:32:12 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x5) socket(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0xffffff1f}, [@typed={0x14, 0x6, @ipv6=@local}]}, 0x28}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) write$binfmt_elf32(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605000708200000000000000003003e00ff070000fb0000003800002000010004000100020000000000060000600900000000000000ffffff7f3a39a636080000000900000000f8ffff66a6a32dbac5ec5b6423b337ca8fb5702764a320d734e908b6d7dc79c1113f2f342193cb1272c91f9a7c3d2f55a1a865241e0cf7d7eadfa7da0119fa5fbeab54febac5f6e51714270f9748fe98f0cd1847f1bce83f3acb0a71669150d336837166c627d6ef75448052c0e4276ec4901dada4a50402ebd15419df95bf51a57afcc15e2e0a33745fa36546d403c82bf37e674eabdc7400"/237], 0xed) [ 142.131092][ T9363] IPVS: ftp: loaded support on port[0] = 21 22:32:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 22:32:12 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000000)=0x8) [ 142.328653][ T9377] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 142.405126][ T9382] IPVS: ftp: loaded support on port[0] = 21 [ 142.428765][ T9388] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 22:32:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 22:32:12 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x27d) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xfffffffffffffffb, 0x32, 0xffffffffffffffff, 0x0) 22:32:12 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x5) socket(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0xffffff1f}, [@typed={0x14, 0x6, @ipv6=@local}]}, 0x28}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) write$binfmt_elf32(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605000708200000000000000003003e00ff070000fb0000003800002000010004000100020000000000060000600900000000000000ffffff7f3a39a636080000000900000000f8ffff66a6a32dbac5ec5b6423b337ca8fb5702764a320d734e908b6d7dc79c1113f2f342193cb1272c91f9a7c3d2f55a1a865241e0cf7d7eadfa7da0119fa5fbeab54febac5f6e51714270f9748fe98f0cd1847f1bce83f3acb0a71669150d336837166c627d6ef75448052c0e4276ec4901dada4a50402ebd15419df95bf51a57afcc15e2e0a33745fa36546d403c82bf37e674eabdc7400"/237], 0xed) [ 142.830843][ T9405] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 22:32:13 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x5) socket(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0xffffff1f}, [@typed={0x14, 0x6, @ipv6=@local}]}, 0x28}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) write$binfmt_elf32(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605000708200000000000000003003e00ff070000fb0000003800002000010004000100020000000000060000600900000000000000ffffff7f3a39a636080000000900000000f8ffff66a6a32dbac5ec5b6423b337ca8fb5702764a320d734e908b6d7dc79c1113f2f342193cb1272c91f9a7c3d2f55a1a865241e0cf7d7eadfa7da0119fa5fbeab54febac5f6e51714270f9748fe98f0cd1847f1bce83f3acb0a71669150d336837166c627d6ef75448052c0e4276ec4901dada4a50402ebd15419df95bf51a57afcc15e2e0a33745fa36546d403c82bf37e674eabdc7400"/237], 0xed) 22:32:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 22:32:13 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x5) socket(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0xffffff1f}, [@typed={0x14, 0x6, @ipv6=@local}]}, 0x28}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) write$binfmt_elf32(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605000708200000000000000003003e00ff070000fb0000003800002000010004000100020000000000060000600900000000000000ffffff7f3a39a636080000000900000000f8ffff66a6a32dbac5ec5b6423b337ca8fb5702764a320d734e908b6d7dc79c1113f2f342193cb1272c91f9a7c3d2f55a1a865241e0cf7d7eadfa7da0119fa5fbeab54febac5f6e51714270f9748fe98f0cd1847f1bce83f3acb0a71669150d336837166c627d6ef75448052c0e4276ec4901dada4a50402ebd15419df95bf51a57afcc15e2e0a33745fa36546d403c82bf37e674eabdc7400"/237], 0xed) 22:32:13 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x27d) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xfffffffffffffffb, 0x32, 0xffffffffffffffff, 0x0) 22:32:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) 22:32:13 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) [ 143.669709][ T9513] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 143.705784][ T9500] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 22:32:13 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0xfffffffffffffffd) 22:32:13 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 22:32:13 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x5) socket(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0xffffff1f}, [@typed={0x14, 0x6, @ipv6=@local}]}, 0x28}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) write$binfmt_elf32(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605000708200000000000000003003e00ff070000fb0000003800002000010004000100020000000000060000600900000000000000ffffff7f3a39a636080000000900000000f8ffff66a6a32dbac5ec5b6423b337ca8fb5702764a320d734e908b6d7dc79c1113f2f342193cb1272c91f9a7c3d2f55a1a865241e0cf7d7eadfa7da0119fa5fbeab54febac5f6e51714270f9748fe98f0cd1847f1bce83f3acb0a71669150d336837166c627d6ef75448052c0e4276ec4901dada4a50402ebd15419df95bf51a57afcc15e2e0a33745fa36546d403c82bf37e674eabdc7400"/237], 0xed) 22:32:13 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x5) socket(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0xffffff1f}, [@typed={0x14, 0x6, @ipv6=@local}]}, 0x28}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) write$binfmt_elf32(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605000708200000000000000003003e00ff070000fb0000003800002000010004000100020000000000060000600900000000000000ffffff7f3a39a636080000000900000000f8ffff66a6a32dbac5ec5b6423b337ca8fb5702764a320d734e908b6d7dc79c1113f2f342193cb1272c91f9a7c3d2f55a1a865241e0cf7d7eadfa7da0119fa5fbeab54febac5f6e51714270f9748fe98f0cd1847f1bce83f3acb0a71669150d336837166c627d6ef75448052c0e4276ec4901dada4a50402ebd15419df95bf51a57afcc15e2e0a33745fa36546d403c82bf37e674eabdc7400"/237], 0xed) 22:32:13 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 22:32:13 executing program 3: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write(r0, &(0x7f0000001200)="f9f821cc335dd2b3b56fea48ff9b0216a0689252fa14560344e2194452a6b2fae658141c7bbb9abfc217d95fa2a29fa9bfdb2023b0a9770afb6a7df7de5a41c0c4b5a55469e74eac0015af9106d0bf6f589f1bebec381f6f965e2d22cba8716b4b86b6267196fb6552ca052ed65bc2ee5b733b4e6b4a4ba8b193db017987e1a5bd6bbf4a820a1d13e4054c62904e136bd67ef16eb743ee62b841fe746061c87280a468bf4732c621f7796f1cc07580a0ddae953e8ced77033a448d4f8e6f55ea18236f71707af6dda60f828453da1a88e1c3bfe63fef54121556e3500c4aa726504a3b37fbfe67a528fc39d8aabdb40297ccb78da0affa60b650b6ac2bda8470b40c00803334ffc6bb3c40721496d2e5055129116f2b69e23eac33955513a692b233eb9e4d932dad9d17d6446f23155df0edab279a5049564721931ebc91f22c106be9fb08c8edfc560309be48b3d9e2b530a8aacf4e4066d245629dfd8f20de4a5ce39fee01ab21378829b2f97c205b6adc6c69b46a6dd5f4c8baa947ce53674622d100e58d744f6ce4c44f6643199ceecb43da8339ed0c621e0316463bf2765d96552f330db0c8eaeb575b13c1894b33b160ac49fa0b5ad1e572bc5a343ca4bbb266fc80b8ce129706caaef559771bb4cf2f6b141b3d45b42bc88830bd67d626a4a2e2578805fc7f0ba2ac2fe96cd07aaf083b19c38c3e9a8d83b8751aa346a241f620de59bbe88b9a383f7c8dc45ee7ce14ff0d465bb5c6957c323051f53ac09bec617d3922c127bcfaa1d4a23350dbcee7b240f7871910b3f1d635e9410865436f045944acb6d7bc6e23ec0b3dd6a49b9e43bd13812932a98caac8b302d2dad6fcdb08a202f6d6bc8e613900a6c146ddafddb44504ef0350cd7c58ab7706b47ff9e8254e2a2fedcd285d4be6781342674582a95d976fb9e9dba3a9a803dd519320acc1d1e5ed2211af0ae606ab4b1579824168527d4627170d2304842cd5d2e9d8d243445f5d24d61448181c239818f700d147cc607fa572074436d6ff34877319b176312e214a018e59d744293d551812592646eabe3d7d7f030df85cec74e36e506ddfe583b709aa442df6ba80f53780820d555df52c19eac6afd177dc8257408479032301c4491ad00c4adad6fd80822c50d24b38170b0c07ec7bc8839b1606e2b1a79daf154a8c9b94e9ecd8d51dd00fb354a462068e689afe707cf1e3a51bd178bdd93c65721ba1419a98082404e76b07718440a20952e475df9258f4327bfc71e1f2a107da953d9f6e0868f35fa693386ea5715180ece4ee3e12887e2c624e4a975aee73c3a82456838ab80ef93ef0fb0138b83384afad9a07e4f5a8f81870431373b4ce50c907a024e097b23e538d3db0195326de7f5b176b8469bbe9f8e65ebb1bcd636ac26d874f73ed00ca4d9ceb643e913f4e18d595caba86d3aa484666d60fd4a995d892c497438f9ed590b74a7939b76929c50478699b75335b33003bdb67f4fbf7c7df2026ed2bacb1c2549fb648d82d8dd24b8d7421007a9f63d9b455ceca43bab73cf1584b4332a3521fa63ee5373d990202b538308e1acb3dae696e3d30fd3ecee527c3cf63bff7a42918d3729fd2e2a54cf236d459a4116565a52a33acfd9cab2686a8306e27dce5bbf3f8fb0355f9b1ca26e0766eab636300d8e5257d2dbfa4d8f02b15b6231d702062cbc08d97006e70d75956648f0bd54692fdf70e75c2e6e8ad40c82ad257d6cdb5480377049ccc22b2172b9416ab2779dc67e006214e3bcb418f7fc7d0016ba244f62bd5b63f0d6c158b2dc58121760f6ed15260a2ef58ffdb4015d00055ecb098e31c36ebb7b9dc17f16c157977a7d3fcaad75e8d7d71dd219b02b36d342d7acc9b5b0d67023cfdb6205b749fc5633986ced893dabce7a98fb7b176198df889209f130c47c3bdc5344d44c026a1f4c0ff8cc29c41e8de2ff86fb925c69a4e4b03c6636a49e7057db79f9f51baff7b1d2c3cd537e9ecb2b297cd0dd1da263db538f0624bb70aa398a24f2bcb852dbf976291a8114de29446b412b94b8c7b7217547d482b0b9659a2496c1df85c3fefe8dd3b082600b3a2af0a70617a687777ddb8163e9a18c7a75bc74099bd5d4e5347afa7ea0b529ad96c90bb7f1ff3bc3f60e881d931870d332a0a5417fdf33350b6399fe59e985e6364efa0433bbfc0117211a68a86e4519cf307bf35bdc919c62fc40c98eb86b5be5901f7881e54cc04e58316fefd3c0dd98849a505bd9c651b8c36e768bf772970c44d2a0e5b3eed624f9dc55f18e2f3917c74493e852161d35f602f73bda12056815c77dce295b7593e3938432cc606ec569993e5ec81f99b89276bbb5f6211c726a3a4cb4b037d541bd4751503c5bc374026b8cd88703d00f20b07bba5056f4694f0ee925d6fd84d65d548c8e5ab50e4497ee4a1d417ca2adb8592ad466ad97c816518d0dcf0006807bb4fdbda09a5ff95e6dfca068bcedd1c07ebc23c37c4ee2d04f8afc0994209473faaab3f040365004d072a2b8257bc18450dfe06f02be52456200b3b1a6353b281fa2c7c9f06ce3bbe4504d3479506a37009b5ff48cb394a33d0ea07159fe67b78c8849d8853d771712c8b9ec97b46e04d641d1f4c78d91a18c86dd6bf08075f8361bc1ffe859586507aef8f7db5fcd120ef2502083af26cbc8a193edb0e126c437d655f745bfd6d73c88d55593d8a55e91097d1a938e40df29c465220ae746724837822619f0f7e46ff196b1166b6daeaad09f0bfad65c6f7d82fe71569c720911f130269c2347ae235aeb9ff63984cf298e509cd8980ddb9370a676f65162ea2e9fcf72d70563321056a8bdc6b1e95449087c4c6bb579662f3b0a42cc983150d6a367a46da5c907d30c335ed58d96cd8e8bcf822994a19120753b6a7f46e11958d38099d4acd2f917319677a0a4b30ed8a202c2f41b6d9ac20c06d4abe72bfb9aea3cdc7f027018acc8d475568e7952362d4d63761bf682cf04b7f5b09dc2e622695a42c80a3e46f2fc660090fbf41ff68ff557d62e9852693b6af508e270d78aa750a54a42ef92cf248e257a13dd779db68ec1533b4fe65fce7e1225e220e6ce70ed4df83c12eb3f75ae3b83c3bab4f8d42f04bd2635ca8545a585874b5539f4ac6ebe35129da10365d5049e9c9274f04dcb523bf4491f2be18437058a2d28535c4ab10bae019709e248b610aee3d995d485e09f596fad8ec516d083187f30b59934c80fefc7d4f2f7b21e12cbb8f1cc8103be98c6f4d7e0f8e330d3bbeaeb5a1cd674907e3c8feb3db6a81d1d0f3a343d3a3e319cb334761500967e3120780c86429d22fd69cb876264b3b27db7aab7ceada92b51d2bfa3a8d27895fb02640cea2d8da9c610d70571ccdd61721213c602d85cf12a4f9057a6ae1c45cc1413b2be49f5b4c9ea8ca2b67fd44563197162daabed58eee61c916f95d823e1db69ffe78f03feda4252af19bb15d683f6f7289065b4cb89dd9f620cd19ecc09cbe0c0cad4075e058b3d798e4d80d5445d643c54cce26d5bee6642a74395e5c560ca4b4645110202db85a7f137281fbad8be21c066ee3f5c8d2b6b7f1453ad67113c0127faafd1873ddf9f25762d4bf0b71a0144953f9e6c4f3557f17918ba84d4cae2fcb79fe1e0752822cc98d96a588b0479aab9bf1c9e49c00081b4ad097ff72dd9f3b0113394ded38b2ec2d7586785698088d2be529c63890691b5314bf3ce8e5e1f630b5ee459b5bbe6f7b8062cc880efcc7c47224b67414c30dc3c24428b6af756acad09d41366d1fe1e5eb0f8daecb5c5814e012254ac88a98b1bcb716eb46bafb71aefc8f792e575e4fc569d4401873d4b052ff55d1167671f6ba3997a196072d32dbef9d0d08bc81d728ab019b260c612ba35f667f478d4734663562be81b9cfa07254cfead8ac0dccdb9c33d0e70da17984c51f92b4416036d0a30a1a73f1f0e5f1a4237cca109baa817581c0a10302cb7d61751c31544ab0d78913abbc66002da523c1d529b3d0607b54d09c518ae5ee3842affa109a7039e539770de60c45bc55d1e2553b24937c54bed599cf26fe44f7aa3326d98a20f55efd7983b02c550e29e1a716680c8afc80d04e59b1f51de0bd253cc3aae9f17db63e11812adc6410cb55edb428ef2e8f949238cbfa83184de49cd08897bd2949c8fd170e7730852a44b6aedec1efd6d4d99831c16831948d26cc288ab3bb7ee7ae7590140fba4caf4cb40cc6283243470edc5ad302c38dfd4480e9a287739e4534e9ec3cc60babbd77410730aaae8b8c8b98cd79eb2b78a52e61b69801d2098f0af853d3ce60fee16629ea49844ff3bd9e10137ca3794c3d9e8f7d1a9d9829886a1d338dcd4e4477acd5154cb4162c57041d60567109352602630a25ff9eec2fbcd1607451b5dcf50f65fb0979240df13592c55a2aed7a29b21ea4980d2c69cd52c6d296ac4fd1fc5c6a872d1931edf4b46a6f1a98fa7f4ff5eed5fd957f9e15a5cd1cfd897c6f1cffc577bef0747688233eef591bd67855d9aff1edbd433afe269405166b35852b873289093b84eb9ecf4154af16045b6b540aef3e47dc42eb94168016a25f62497c6c6783482337fe4a7bfe9f11d67fbed30328218936f6068c37920a486d8e5d9a85b656c269588955c197b8981f208bcf9d8cd0bb43604843a1831333e79d26a2bedae5f05f21cff9de396b47a31050e0bcfa01c0f546adf735b2a984d1ac282d3c9c86d71e6f51336bb85a992e79e7d612555ddafc4b928d67dbe11041a9a77bd14de3d20c6ac7ccf0a14882f32f60ba2ef8af4bda5ade953fac384c1bd26bcdd69a6ea8a8d7ea42d3877399ae1b4e5dd187b98163e1c47ec7162b8099272472b6c3ffb166df196a756a6d886e6ba75fafbf875960ad5bc29b4cd5656192ce27bc052d1150bf8fbdfc2ed53c6a797cd5bb5963935b7a499b49c504db6b12854dfc20574bd1d9c3bbe36f310cc040206eb830126d3aa1ed3d5cfc297c76e64a14c0b75011b7c58b98c5028d8e60bb72f96b0e4e14ebb321876cd00ee81e4a64427e7b4dbf921739", 0xe00) 22:32:13 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 22:32:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x7fff, 0x8000000001}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x400000077fffb, 0x0, 0x820000, 0x0}, 0x2c) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x8011, r0, 0x0) pipe(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 144.091513][ T9538] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 144.146122][ T9530] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 144.162380][ T9538] ================================================================== [ 144.170732][ T9538] BUG: KASAN: use-after-free in nla_memcpy+0xa2/0xb0 [ 144.177417][ T9538] Read of size 2 at addr ffff888090b53d54 by task syz-executor.0/9538 [ 144.185568][ T9538] [ 144.187945][ T9538] CPU: 1 PID: 9538 Comm: syz-executor.0 Not tainted 5.4.0-rc1+ #0 [ 144.195753][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.205818][ T9538] Call Trace: [ 144.209130][ T9538] dump_stack+0x172/0x1f0 [ 144.213468][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.217819][ T9538] print_address_description.constprop.0.cold+0xd4/0x30b [ 144.224856][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.229200][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.233537][ T9538] __kasan_report.cold+0x1b/0x41 [ 144.238494][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.242839][ T9538] kasan_report+0x12/0x20 [ 144.247187][ T9538] __asan_report_load2_noabort+0x14/0x20 [ 144.252880][ T9538] nla_memcpy+0xa2/0xb0 [ 144.257059][ T9538] __cfg802154_wpan_dev_from_attrs+0x41b/0x550 [ 144.263239][ T9538] ? nl802154_post_doit+0x200/0x200 [ 144.268472][ T9538] nl802154_prepare_wpan_dev_dump.isra.0.constprop.0+0xf7/0x4b0 [ 144.276128][ T9538] nl802154_dump_llsec_seclevel+0xb9/0xae0 [ 144.281964][ T9538] ? mutex_trylock+0x2d0/0x2d0 [ 144.286746][ T9538] ? kasan_kmalloc+0x9/0x10 [ 144.291263][ T9538] ? __kmalloc_node_track_caller+0x4e/0x70 [ 144.297085][ T9538] ? nl802154_dump_llsec_key+0xc80/0xc80 [ 144.302730][ T9538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.302760][ T9538] ? __alloc_skb+0x3d0/0x5e0 [ 144.302785][ T9538] genl_lock_dumpit+0x86/0xc0 [ 144.302801][ T9538] netlink_dump+0x558/0xfb0 [ 144.302817][ T9538] ? netlink_broadcast+0x50/0x50 [ 144.302847][ T9538] __netlink_dump_start+0x5b1/0x7d0 [ 144.302861][ T9538] ? genl_lock_dumpit+0xc0/0xc0 [ 144.302880][ T9538] genl_rcv_msg+0xc9b/0x1000 [ 144.302901][ T9538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x3a0/0x3a0 [ 144.302913][ T9538] ? genl_lock_dumpit+0xc0/0xc0 [ 144.302925][ T9538] ? genl_unlock+0x20/0x20 [ 144.302938][ T9538] ? genl_parallel_done+0x1c0/0x1c0 [ 144.302964][ T9538] ? mark_held_locks+0xf0/0xf0 [ 144.302977][ T9538] ? find_held_lock+0x35/0x130 [ 144.354430][ T9538] netlink_rcv_skb+0x177/0x450 [ 144.354453][ T9538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x3a0/0x3a0 [ 144.354471][ T9538] ? netlink_ack+0xb50/0xb50 [ 144.354486][ T9538] ? __kasan_check_write+0x14/0x20 [ 144.354511][ T9538] ? netlink_deliver_tap+0x254/0xbf0 [ 144.400455][ T9538] genl_rcv+0x29/0x40 [ 144.404462][ T9538] netlink_unicast+0x531/0x710 [ 144.409246][ T9538] ? netlink_attachskb+0x7c0/0x7c0 [ 144.414363][ T9538] ? _copy_from_iter_full+0x25d/0x8c0 [ 144.414383][ T9538] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 144.414397][ T9538] ? __check_object_size+0x3d/0x437 [ 144.414419][ T9538] netlink_sendmsg+0x8a5/0xd60 [ 144.435475][ T9538] ? netlink_unicast+0x710/0x710 [ 144.440430][ T9538] ? aa_sock_msg_perm.isra.0+0xba/0x170 22:32:14 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 22:32:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x73058cdb, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 144.440450][ T9538] ? apparmor_socket_sendmsg+0x2a/0x30 [ 144.440468][ T9538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.440485][ T9538] ? security_socket_sendmsg+0x8d/0xc0 [ 144.440500][ T9538] ? netlink_unicast+0x710/0x710 [ 144.440515][ T9538] sock_sendmsg+0xd7/0x130 [ 144.440530][ T9538] ___sys_sendmsg+0x803/0x920 [ 144.440545][ T9538] ? copy_msghdr_from_user+0x440/0x440 [ 144.440569][ T9538] ? __kasan_check_read+0x11/0x20 [ 144.440588][ T9538] ? __fget+0x384/0x560 [ 144.440610][ T9538] ? ksys_dup3+0x3e0/0x3e0 [ 144.496500][ T9538] ? __fget_light+0x1a9/0x230 [ 144.501189][ T9538] ? __fdget+0x1b/0x20 [ 144.505273][ T9538] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 144.511532][ T9538] __sys_sendmsg+0x105/0x1d0 [ 144.516134][ T9538] ? __sys_sendmsg_sock+0xd0/0xd0 [ 144.521189][ T9538] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 144.526665][ T9538] ? do_syscall_64+0x26/0x760 [ 144.531526][ T9538] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 144.537628][ T9538] ? do_syscall_64+0x26/0x760 [ 144.542332][ T9538] __x64_sys_sendmsg+0x78/0xb0 22:32:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@loopback}, {@in6=@local, 0x0, 0x33}, @in6=@remote}}}, 0xf8}}, 0x0) [ 144.547114][ T9538] do_syscall_64+0xfa/0x760 [ 144.551641][ T9538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 144.557636][ T9538] RIP: 0033:0x459a59 [ 144.561542][ T9538] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 144.581156][ T9538] RSP: 002b:00007f481799ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.589571][ T9538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 144.589580][ T9538] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 144.589588][ T9538] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 144.589595][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f481799f6d4 [ 144.589602][ T9538] R13: 00000000004c7bad R14: 00000000004dd938 R15: 00000000ffffffff [ 144.589621][ T9538] [ 144.589634][ T9538] Allocated by task 9530: [ 144.589652][ T9538] save_stack+0x23/0x90 [ 144.589664][ T9538] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 144.589675][ T9538] kasan_kmalloc+0x9/0x10 [ 144.589686][ T9538] __kmalloc_node_track_caller+0x4e/0x70 [ 144.589698][ T9538] __kmalloc_reserve.isra.0+0x40/0xf0 [ 144.589708][ T9538] __alloc_skb+0x10b/0x5e0 [ 144.589720][ T9538] netlink_sendmsg+0x972/0xd60 [ 144.589736][ T9538] sock_sendmsg+0xd7/0x130 [ 144.605758][ T9538] ___sys_sendmsg+0x803/0x920 [ 144.605773][ T9538] __sys_sendmsg+0x105/0x1d0 [ 144.605787][ T9538] __x64_sys_sendmsg+0x78/0xb0 [ 144.605803][ T9538] do_syscall_64+0xfa/0x760 22:32:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x10, 0x3}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) [ 144.605817][ T9538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 144.605827][ T9538] [ 144.701660][ T9538] Freed by task 9530: [ 144.705720][ T9538] save_stack+0x23/0x90 [ 144.709881][ T9538] __kasan_slab_free+0x102/0x150 [ 144.714818][ T9538] kasan_slab_free+0xe/0x10 [ 144.719326][ T9538] kfree+0x10a/0x2c0 [ 144.723221][ T9538] skb_free_head+0x93/0xb0 [ 144.727648][ T9538] skb_release_data+0x42d/0x7c0 [ 144.732517][ T9538] skb_release_all+0x4d/0x60 [ 144.737114][ T9538] consume_skb+0xfb/0x3b0 [ 144.741447][ T9538] netlink_unicast+0x539/0x710 [ 144.746234][ T9538] netlink_sendmsg+0x8a5/0xd60 [ 144.751005][ T9538] sock_sendmsg+0xd7/0x130 [ 144.755429][ T9538] ___sys_sendmsg+0x803/0x920 [ 144.760115][ T9538] __sys_sendmsg+0x105/0x1d0 [ 144.764713][ T9538] __x64_sys_sendmsg+0x78/0xb0 [ 144.769485][ T9538] do_syscall_64+0xfa/0x760 [ 144.773999][ T9538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 144.779878][ T9538] [ 144.779889][ T9538] The buggy address belongs to the object at ffff888090b53d40 [ 144.779889][ T9538] which belongs to the cache kmalloc-512 of size 512 22:32:14 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 22:32:14 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) [ 144.779899][ T9538] The buggy address is located 20 bytes inside of [ 144.779899][ T9538] 512-byte region [ffff888090b53d40, ffff888090b53f40) [ 144.779904][ T9538] The buggy address belongs to the page: [ 144.779916][ T9538] page:ffffea000242d4c0 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0xffff888090b53840 [ 144.779927][ T9538] flags: 0x1fffc0000000200(slab) [ 144.779944][ T9538] raw: 01fffc0000000200 ffffea00023c4588 ffffea000255ce88 ffff8880aa400a80 [ 144.779960][ T9538] raw: ffff888090b53840 ffff888090b530c0 0000000100000004 0000000000000000 [ 144.779966][ T9538] page dumped because: kasan: bad access detected [ 144.779970][ T9538] [ 144.779974][ T9538] Memory state around the buggy address: [ 144.779985][ T9538] ffff888090b53c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.779995][ T9538] ffff888090b53c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 144.780005][ T9538] >ffff888090b53d00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 144.780010][ T9538] ^ [ 144.780018][ T9538] ffff888090b53d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.780027][ T9538] ffff888090b53e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.780031][ T9538] ================================================================== [ 144.780036][ T9538] Disabling lock debugging due to kernel taint [ 144.835153][ T9538] Kernel panic - not syncing: panic_on_warn set ... [ 144.865094][ T3879] kobject: 'loop4' (000000004e192dea): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 144.865272][ T9538] CPU: 1 PID: 9538 Comm: syz-executor.0 Tainted: G B 5.4.0-rc1+ #0 [ 144.884039][ T3879] kobject: 'loop5' (00000000f7dd18df): kobject_uevent_env [ 144.889405][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.889410][ T9538] Call Trace: [ 144.889428][ T9538] dump_stack+0x172/0x1f0 [ 144.889441][ T9538] panic+0x2dc/0x755 [ 144.889451][ T9538] ? add_taint.cold+0x16/0x16 [ 144.889463][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.889478][ T9538] ? preempt_schedule+0x4b/0x60 [ 144.889491][ T9538] ? ___preempt_schedule+0x16/0x20 [ 144.889509][ T9538] ? trace_hardirqs_on+0x5e/0x240 [ 144.902217][ T3879] kobject: 'loop5' (00000000f7dd18df): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 144.904237][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.904256][ T9538] end_report+0x47/0x4f [ 144.927832][ T3879] kobject: 'loop1' (000000009f865c13): kobject_uevent_env [ 144.933321][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.933335][ T9538] __kasan_report.cold+0xe/0x41 [ 144.933346][ T9538] ? nla_memcpy+0xa2/0xb0 [ 144.933358][ T9538] kasan_report+0x12/0x20 [ 144.933371][ T9538] __asan_report_load2_noabort+0x14/0x20 [ 144.933381][ T9538] nla_memcpy+0xa2/0xb0 [ 144.933396][ T9538] __cfg802154_wpan_dev_from_attrs+0x41b/0x550 [ 144.933414][ T9538] ? nl802154_post_doit+0x200/0x200 [ 144.946238][ T3879] kobject: 'loop1' (000000009f865c13): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 144.952761][ T9538] nl802154_prepare_wpan_dev_dump.isra.0.constprop.0+0xf7/0x4b0 [ 144.952777][ T9538] nl802154_dump_llsec_seclevel+0xb9/0xae0 [ 144.952789][ T9538] ? mutex_trylock+0x2d0/0x2d0 [ 144.952801][ T9538] ? kasan_kmalloc+0x9/0x10 [ 144.952811][ T9538] ? __kmalloc_node_track_caller+0x4e/0x70 [ 144.952830][ T9538] ? nl802154_dump_llsec_key+0xc80/0xc80 [ 144.999369][ T3879] kobject: 'loop2' (00000000f0749d0c): kobject_uevent_env [ 145.000358][ T9538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 145.000377][ T9538] ? __alloc_skb+0x3d0/0x5e0 [ 145.007201][ T3879] kobject: 'loop2' (00000000f0749d0c): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 145.015523][ T9538] genl_lock_dumpit+0x86/0xc0 [ 145.015537][ T9538] netlink_dump+0x558/0xfb0 [ 145.015550][ T9538] ? netlink_broadcast+0x50/0x50 [ 145.015569][ T9538] __netlink_dump_start+0x5b1/0x7d0 [ 145.015581][ T9538] ? genl_lock_dumpit+0xc0/0xc0 [ 145.015599][ T9538] genl_rcv_msg+0xc9b/0x1000 [ 145.015619][ T9538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x3a0/0x3a0 [ 145.068181][ T3879] kobject: 'loop5' (00000000f7dd18df): kobject_uevent_env [ 145.070086][ T9538] ? genl_lock_dumpit+0xc0/0xc0 [ 145.070097][ T9538] ? genl_unlock+0x20/0x20 [ 145.070107][ T9538] ? genl_parallel_done+0x1c0/0x1c0 [ 145.070125][ T9538] ? mark_held_locks+0xf0/0xf0 [ 145.070137][ T9538] ? find_held_lock+0x35/0x130 [ 145.070156][ T9538] netlink_rcv_skb+0x177/0x450 [ 145.083881][ T3879] kobject: 'loop5' (00000000f7dd18df): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 145.087930][ T9538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x3a0/0x3a0 [ 145.087949][ T9538] ? netlink_ack+0xb50/0xb50 [ 145.153790][ T3879] kobject: 'loop4' (000000004e192dea): kobject_uevent_env [ 145.156474][ T9538] ? __kasan_check_write+0x14/0x20 [ 145.165295][ T3879] kobject: 'loop4' (000000004e192dea): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 145.166595][ T9538] ? netlink_deliver_tap+0x254/0xbf0 [ 145.166613][ T9538] genl_rcv+0x29/0x40 [ 145.270343][ T9538] netlink_unicast+0x531/0x710 [ 145.275238][ T9538] ? netlink_attachskb+0x7c0/0x7c0 [ 145.280349][ T9538] ? _copy_from_iter_full+0x25d/0x8c0 [ 145.285896][ T9538] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 145.291638][ T9538] ? __check_object_size+0x3d/0x437 [ 145.296820][ T9538] netlink_sendmsg+0x8a5/0xd60 [ 145.301571][ T9538] ? netlink_unicast+0x710/0x710 [ 145.306503][ T9538] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 145.312028][ T9538] ? apparmor_socket_sendmsg+0x2a/0x30 [ 145.317479][ T9538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 145.323815][ T9538] ? security_socket_sendmsg+0x8d/0xc0 [ 145.329257][ T9538] ? netlink_unicast+0x710/0x710 [ 145.334192][ T9538] sock_sendmsg+0xd7/0x130 [ 145.338601][ T9538] ___sys_sendmsg+0x803/0x920 [ 145.343278][ T9538] ? copy_msghdr_from_user+0x440/0x440 [ 145.348720][ T9538] ? __kasan_check_read+0x11/0x20 [ 145.353728][ T9538] ? __fget+0x384/0x560 [ 145.357868][ T9538] ? ksys_dup3+0x3e0/0x3e0 [ 145.362287][ T9538] ? __fget_light+0x1a9/0x230 [ 145.366952][ T9538] ? __fdget+0x1b/0x20 [ 145.371022][ T9538] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 145.377337][ T9538] __sys_sendmsg+0x105/0x1d0 [ 145.381924][ T9538] ? __sys_sendmsg_sock+0xd0/0xd0 [ 145.386937][ T9538] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 145.392386][ T9538] ? do_syscall_64+0x26/0x760 [ 145.397042][ T9538] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 145.403355][ T9538] ? do_syscall_64+0x26/0x760 [ 145.408276][ T9538] __x64_sys_sendmsg+0x78/0xb0 [ 145.413029][ T9538] do_syscall_64+0xfa/0x760 [ 145.417686][ T9538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 145.423578][ T9538] RIP: 0033:0x459a59 [ 145.427466][ T9538] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 145.447055][ T9538] RSP: 002b:00007f481799ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.455510][ T9538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 145.463468][ T9538] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 145.471423][ T9538] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 145.479385][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f481799f6d4 [ 145.487359][ T9538] R13: 00000000004c7bad R14: 00000000004dd938 R15: 00000000ffffffff [ 145.496786][ T9538] Kernel Offset: disabled [ 145.501127][ T9538] Rebooting in 86400 seconds..