[ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts. 2020/07/18 01:34:33 fuzzer started 2020/07/18 01:34:33 dialing manager at 10.128.0.26:33695 2020/07/18 01:34:33 syscalls: 3087 2020/07/18 01:34:33 code coverage: enabled 2020/07/18 01:34:33 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/18 01:34:33 extra coverage: enabled 2020/07/18 01:34:33 setuid sandbox: enabled 2020/07/18 01:34:33 namespace sandbox: enabled 2020/07/18 01:34:33 Android sandbox: enabled 2020/07/18 01:34:33 fault injection: enabled 2020/07/18 01:34:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/18 01:34:33 net packet injection: enabled 2020/07/18 01:34:33 net device setup: enabled 2020/07/18 01:34:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/18 01:34:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/18 01:34:33 USB emulation: /dev/raw-gadget does not exist 01:37:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002}, [@IFLA_OPERSTATE={0x8, 0xa, 0xf}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0) syzkaller login: [ 304.749625][ T32] audit: type=1400 audit(1595036225.002:8): avc: denied { execmem } for pid=8458 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 305.071520][ T8459] IPVS: ftp: loaded support on port[0] = 21 [ 305.352840][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 305.617049][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.624343][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.634439][ T8459] device bridge_slave_0 entered promiscuous mode [ 305.649040][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.656428][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.665807][ T8459] device bridge_slave_1 entered promiscuous mode [ 305.718109][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.733632][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.788275][ T8459] team0: Port device team_slave_0 added [ 305.801394][ T8459] team0: Port device team_slave_1 added [ 305.870956][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.878124][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.905671][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.969286][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.976999][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.003217][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.175860][ T8459] device hsr_slave_0 entered promiscuous mode [ 306.318301][ T8459] device hsr_slave_1 entered promiscuous mode [ 306.911733][ T8459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.955711][ T8459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.015347][ T8459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.054133][ T8459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.284330][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.331931][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.341365][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.360520][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.382752][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.393515][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.404657][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.412039][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.477225][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.487236][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.497295][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.506942][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.514155][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.523258][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.534243][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.545363][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.556323][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.566656][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.577338][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.595897][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.605824][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.615902][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.632224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.642681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.664254][ T8459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.742917][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.751252][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.787443][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.882760][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.892457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.956837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.971211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.992058][ T8459] device veth0_vlan entered promiscuous mode [ 308.000338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.010716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.037716][ T8459] device veth1_vlan entered promiscuous mode [ 308.112788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.123175][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 308.133046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.143324][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.164430][ T8459] device veth0_macvtap entered promiscuous mode [ 308.200675][ T8459] device veth1_macvtap entered promiscuous mode [ 308.262276][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.270922][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.280715][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.290271][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.300629][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.353700][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.361520][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.371856][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.959303][ T8681] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.973125][ T8681] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 308.983905][ T8681] bond0: (slave ipvlan1): Error -95 calling set_mac_address 01:37:09 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x48) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01008674", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) 01:37:10 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x48) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01008674", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) 01:37:11 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x48) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01008674", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) 01:37:11 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x48) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01008674", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) [ 311.738840][ T8701] IPVS: ftp: loaded support on port[0] = 21 [ 312.014534][ T8701] chnl_net:caif_netlink_parms(): no params data found 01:37:12 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x48) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01008674", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) [ 312.283875][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.292501][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.302641][ T8701] device bridge_slave_0 entered promiscuous mode [ 312.362948][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.370491][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.380063][ T8701] device bridge_slave_1 entered promiscuous mode [ 312.528597][ T8701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.571450][ T8701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.635519][ T8701] team0: Port device team_slave_0 added [ 312.650869][ T8701] team0: Port device team_slave_1 added [ 312.717599][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.724665][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.751036][ T8701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.789143][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.796373][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.822889][ T8701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.945109][ T8701] device hsr_slave_0 entered promiscuous mode [ 313.008562][ T8701] device hsr_slave_1 entered promiscuous mode 01:37:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x7fff, 0x0, 0x1, 0x0, [0x13]}, 0x40) [ 313.086751][ T8701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.094393][ T8701] Cannot create hsr debugfs directory 01:37:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x7fff, 0x0, 0x1, 0x0, [0x13]}, 0x40) [ 313.700002][ T8701] netdevsim netdevsim1 netdevsim0: renamed from eth0 01:37:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x7fff, 0x0, 0x1, 0x0, [0x13]}, 0x40) [ 313.746675][ T8701] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.806797][ T8701] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.870954][ T8701] netdevsim netdevsim1 netdevsim3: renamed from eth3 01:37:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x7fff, 0x0, 0x1, 0x0, [0x13]}, 0x40) [ 314.243947][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.297564][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.306916][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.349408][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.376832][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.386914][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.396400][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.403660][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state 01:37:14 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 314.507870][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.517722][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.527840][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.537302][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.544589][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.553703][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.564675][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.575522][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.586310][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.596731][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.607424][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.681325][ T8701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.691960][ T8701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.757354][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.767549][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.777406][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.791012][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.800851][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.871356][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.900584][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.910209][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.946418][ T8701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.042535][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.052909][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.135415][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.145957][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.163886][ T8701] device veth0_vlan entered promiscuous mode [ 315.186929][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.196814][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.216440][ T8701] device veth1_vlan entered promiscuous mode [ 315.307364][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.320277][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.344394][ T8701] device veth0_macvtap entered promiscuous mode [ 315.366927][ T8701] device veth1_macvtap entered promiscuous mode [ 315.423254][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 315.434566][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.448833][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.458117][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 01:37:15 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 315.468328][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.477861][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.490832][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.554153][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 315.564840][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.581760][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.591646][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.602042][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.839163][ C1] hrtimer: interrupt took 56398 ns [ 315.851372][ T32] audit: type=1800 audit(1595036236.103:9): pid=8932 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15724 res=0 01:37:16 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 316.918320][ T32] audit: type=1800 audit(1595036237.173:10): pid=8954 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15734 res=0 01:37:18 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x48) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01008674", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) 01:37:18 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 318.013766][ T32] audit: type=1800 audit(1595036238.263:11): pid=8964 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15737 res=0 01:37:19 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/nf_conntrack\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x48) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01008674", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) 01:37:19 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 319.070774][ T32] audit: type=1800 audit(1595036239.323:12): pid=8972 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15737 res=0 01:37:20 executing program 1: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0xfffffffd, 0x4) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) 01:37:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$random(0xffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x111400, 0x0) fcntl$addseals(r1, 0x409, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000432408e623a2fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000400ac1414bb08000600ac"], 0x90}}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080), 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d12, &(0x7f00000000c0)) fcntl$setpipe(r1, 0x407, 0x2) r6 = dup(0xffffffffffffffff) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000040)) 01:37:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000075031222dacbae170000000a645520000400000095000000000034000250b4d3b2b3dad7ce523a9bfcc1ef8df0a81e23e8c703b600000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080), 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$TIOCNXCL(r5, 0x540d) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r2) dup3(r7, r1, 0x0) ioctl$PERF_EVENT_IOC_ID(r7, 0x80042407, &(0x7f00000000c0)) [ 320.363031][ T8982] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000075031222dacbae170000000a645520000400000095000000000034000250b4d3b2b3dad7ce523a9bfcc1ef8df0a81e23e8c703b600000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080), 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$TIOCNXCL(r5, 0x540d) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r2) dup3(r7, r1, 0x0) ioctl$PERF_EVENT_IOC_ID(r7, 0x80042407, &(0x7f00000000c0)) 01:37:21 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x7) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000001100)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x8, 0x1, 0xff, 0x2, 0x9}, 0x20) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x101080) [ 320.755170][ T8982] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.985150][ T9000] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 321.142444][ T9000] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 01:37:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x158, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x130, 0x16, 0x0, 0x1, [{0x12c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0xc}, @IFLA_VF_SPOOFCHK={0xc}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @random="bc90cd5986c8"}}, @IFLA_VF_TX_RATE={0xc}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14}, {0x14}, {0x14}, {0x14}, {0x14}, {0x14}, {0x14}, {0x14}]}, @IFLA_VF_LINK_STATE={0xc}, @IFLA_VF_IB_NODE_GUID={0x10}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_LINK_STATE={0xc}]}]}, @IFLA_MASTER={0x8}]}, 0x158}}, 0x1) 01:37:21 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x644c1}, 0x18) truncate(&(0x7f0000000140)='./file0\x00', 0x40bfff) r0 = openat2(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x105002}, 0x18) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x80000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r0, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340), 0xff79) [ 321.423339][ T32] audit: type=1800 audit(1595036241.673:13): pid=9015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15738 res=0 [ 321.504258][ T32] audit: type=1800 audit(1595036241.733:14): pid=9016 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15738 res=0 01:37:21 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) ptrace$setregs(0xd, r1, 0xfffffe01, &(0x7f0000000180)="e4cad45201eab54bcaacab8db023410b4c2093d4faf04256e6671e27689654ebbc520d75efac682f86a710701dd97c57521bef474b9f96f5410903674ca249ad1647ffe1d34892b97ee2584351c11a6798be63eed544a3fb6696031fe2ea94bf") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010800000000000000e326ca1700f8e75e902adf09ba6598af7e067afa317f1fc9254139a9aed52c84db5994bcb77001531759719c809419616b3233df4120d7fd648514f5f92e7e1a0774725c7c40c2bb9a52a55fa6d0a6db357745d84713ab3cb72066287cdb0a79768d16eb8b96319bcdca6352cd26f05797f0c958d9b56dc3f579c8bd3de53f7236794a0748da0f4af7fd8847c483", @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003001100000008001b0000000000"], 0x44}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x40, 0x1, @tid=r3}, &(0x7f0000000300)) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000001100)) fcntl$getownex(r4, 0x10, &(0x7f0000000240)) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/95) 01:37:21 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="f4331100002b2c25fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000003380", 0x5ac}], 0x1}, 0x3b00) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xb4, 0xa, 0x6, 0x101, 0x0, 0x0, {0x18, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @private=0xa010101}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x69}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xbc3f}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_vlan\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x40000c0) [ 321.794252][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:22 executing program 1: socket$kcm(0x10, 0x2, 0x10) epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x35, 0x4000002b, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4) fanotify_mark(0xffffffffffffffff, 0x35, 0x4000002b, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r7 = getpid() sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x40}}, 0x0) [ 321.839838][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) r1 = gettid() r2 = openat$sequencer(0xffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x400c4150, &(0x7f0000000200)={0x0, &(0x7f0000000140)="488f976b9aa4e78d2b5832873d9e66b4a84c9f6a96fbec121e227c610502f735af2e45343c94f0f2304e3d4850123e51ed3db8ab9e0676547ac11b1000f79b72dc293168a391762a426435453257a28c2a1c3ac8aa498fceac5f9f681215359432e899c680a3188468d7ec33c44f6a24554023b1077dab77ccfcd5c57308cb1e260402cd3a29d75efda154cda50bee", 0x8f}) tkill(r1, 0x14) wait4(r1, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071010000800fe0500ff0800030000000000", 0x24) [ 322.074020][ T9030] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 322.188656][ T9031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 01:37:22 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001900000000000500290000000000"], 0x44}}, 0x20000801) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:37:23 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) dup3(r4, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:37:23 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) dup3(r4, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:37:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) dup3(r4, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:37:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) dup3(r4, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:37:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) dup3(r4, r1, 0x0) 01:37:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:24 executing program 2: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1402, 0x200, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8d1}, 0x400) socketpair(0x2b, 0x5, 0x240000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x48030044}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x35}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x65c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) io_setup(0x2, &(0x7f00000004c0)) socket$inet(0x2, 0x80000, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)='%\x00'}, 0x30) r5 = syz_open_pts(0xffffffffffffffff, 0x8000) splice(r4, &(0x7f0000000580)=0xffffffff, r5, &(0x7f00000005c0)=0x6, 0x9, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000680)={0x980000, 0x7fffffff, 0x7fffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0xa10907, 0x3f, [], @string=&(0x7f0000000600)=0x81}}) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000700)={0x34, 0x0, &(0x7f00000006c0)}) r7 = creat(&(0x7f0000000740)='./file0\x00', 0x100) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000780)) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000007c0)=@ccm_128={{0x304}, "310b0b59909d8b48", "ce24d13379749f8a957bebe88eef4fd0", "2d113849", "f127c7a77ff3c1a9"}, 0x28) r8 = syz_open_procfs(r3, &(0x7f0000000800)='net/ip6_mr_vif\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r9, 0x0, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 01:37:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:25 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r0, 0x5, 0x0, "65389850781b5cf01d4bf0828a3c91e543723d7b401179ea925fbf9413feb647f87a9327ae151dd461cb072997d4"}) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) open(&(0x7f0000000100)='./file0/../file0\x00', 0x2c0100, 0x5) 01:37:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 325.362463][ T9073] IPVS: ftp: loaded support on port[0] = 21 01:37:25 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080), 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0185879, &(0x7f0000000080)) 01:37:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 325.938780][ T9073] chnl_net:caif_netlink_parms(): no params data found 01:37:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:26 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080), 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0185879, &(0x7f0000000080)) 01:37:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = userfaultfd(0x0) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:26 executing program 0: r0 = inotify_init() r1 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) sendfile(r1, r1, &(0x7f0000000080), 0xa198) socket$alg(0x26, 0x5, 0x0) [ 326.484068][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.492905][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.502566][ T9073] device bridge_slave_0 entered promiscuous mode 01:37:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 326.581319][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.589248][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.598935][ T9073] device bridge_slave_1 entered promiscuous mode [ 326.700364][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.718747][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.901001][ T9073] team0: Port device team_slave_0 added [ 326.956902][ T9073] team0: Port device team_slave_1 added [ 327.091488][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.099097][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.125324][ T9073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.240441][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.247647][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.275079][ T9073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.478804][ T9073] device hsr_slave_0 entered promiscuous mode [ 327.529954][ T9073] device hsr_slave_1 entered promiscuous mode [ 327.567867][ T9073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.575509][ T9073] Cannot create hsr debugfs directory [ 328.062156][ T9073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.108338][ T9073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.177528][ T9073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.325251][ T9073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.660003][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.710603][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.720330][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.738025][ T9073] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.773618][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.783437][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.793062][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.800386][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.894830][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.905255][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.915595][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.925372][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.932696][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.941754][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.952962][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.964364][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.975458][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.986135][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.997031][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.019792][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.029835][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.040631][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.064166][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.074893][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.105766][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.222003][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.229965][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.258450][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.323569][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.334425][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.391451][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.401419][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.424940][ T9073] device veth0_vlan entered promiscuous mode [ 329.433764][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.443525][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.471862][ T9073] device veth1_vlan entered promiscuous mode [ 329.540115][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.550320][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 329.559994][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.570053][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.590730][ T9073] device veth0_macvtap entered promiscuous mode [ 329.610770][ T9073] device veth1_macvtap entered promiscuous mode [ 329.657788][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 329.668552][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.678607][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 329.689244][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.703503][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.716959][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.726736][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.736383][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.746587][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.775497][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 329.786707][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.796743][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 329.807285][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.821593][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.837054][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.847464][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:37:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x40000be) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000880)="b19462c33f5d8115ec7c43c924cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c771e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b56475a9a3d7b2c10a61673255ee1dd14e0bf57bf2bfebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee12b3e963665de6964774a1aca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f141d8f2fc5dce38fb4c75704d39cc3c12c447f745c283e27dd5d3a37b4e9620b88448aee5b56df5868287b8e68e8c3a0cd433768268ef5a44a29325d", 0xfb}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f00000009c0)="c384a235c07e956b29b267882cfb178ce04249deacee3abfac8f28ae462fb6194d2f3aa45c47f460f355269a3a64677c88bea56e51f0430f966e6d04a53b1b08fc5078250e8552cf4741c9cb0d637bf35b12c12a9b93507ca951ea11d3ec305a2c0f2b4b5784550e15b7a00b6d51ed5bfe50a63002b993f7b8676258a966ade2643976713293611c05f4839a36f8e3ed150481df4d7a5a75dcf11304449f402c7149ef0eb79e04d7", 0xa8}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xe00) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:37:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6fdf4660f3a62227d0f20e06635000040000f07260f0350000f01cf", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.874656][ T9337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 01:37:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000001100)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0_macvtap\x00') r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x1c1) write$binfmt_elf32(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46"], 0x654) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 01:37:31 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, &(0x7f000001b000)=""/102400, 0x19000}, 0x2001) r2 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10000, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) 01:37:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, &(0x7f0000001100)) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, 0x0, &(0x7f0000001100)) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, 0x0, &(0x7f0000001100)) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, 0x0, &(0x7f0000001100)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000011000d040041d2d2e3e4c6c0c8000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0) 01:37:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) r1 = userfaultfd(0x0) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:31 executing program 0: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f00000001c0)=',selind\xa4\xea\xef\xd3\xaf\x97\xedy\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x200100, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x1403, 0x300, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8090}, 0x0) mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=xen,', {[{@cache_mmap='cache=mmap'}, {@cache_none='cache=none'}, {@cache_none='cache=none'}], [{@context={'context', 0x3d, 'user_u'}}, {@seclabel='seclabel'}, {@fowner_lt={'fowner<', r1}}, {@audit='audit'}, {@smackfsfloor={'smackfsfloor', 0x3d, ',selind\xa4\xea\xef\xd3\xaf\x97\xedy\x00'}}]}}) 01:37:32 executing program 1: socket$inet6(0xa, 0x80003, 0xff) r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000001100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x8d0}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x8d0}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r9, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x214, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1a}, @ETHTOOL_A_LINKMODES_OURS={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%[}}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%!^!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\\\'(]u(\t\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x42}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "184a63b844a4dcc95260fb90bfd0ead81d1be10f72013411dab18123ee394f8110fee5044845a8f9e05240c4c573bc6290b633f06c7c7695f5a5567c2d4d5a3e74094397e8b14cbeb4d4d95fe338fd3b768d8dca092c5f0ad5538b170fa09a6a44ec6b487f65d7bce9cc9d9e2a42a901a73870a0a2fbc429628aefe75ef531d096fb42232d87e1d004628bbcb4d66008717abfe2de8bc4479a6a2b251a55487612926a6d0e52c32c966f15207494bb93587ec0cae2a227c176c23340a3b490e20acfc67bce997e5b733bfe95d1f3c484ca4797ab65c6dd6912605c4f3759c1b95577302f146415c1f3bb83fd2c4a76c1c53266057a33"}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "989762ad5b3a9533662c169e2857f1d2a5406731e19cba4bdde24bcecca217e2327cfc7e7a211aeb447fbe7b29650609f3"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}]}]}]}]}, 0x44}}, 0x0) 01:37:32 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x3ff, 0x4) r2 = userfaultfd(0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f00000000c0)={0x54, 0xf90a, 0x1, {0x6, 0x5}, {0xff, 0x3f}, @rumble={0x5, 0x800}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000000200)=@sack_info={0x0, 0x40, 0x9}, &(0x7f0000002000)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x0, 0x0, 0xfffffffc, 0x9849, 0xffffffff}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) dup3(r7, r2, 0x0) write$P9_RCLUNK(r7, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) socket$xdp(0x2c, 0x3, 0x0) 01:37:32 executing program 1: userfaultfd(0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:32 executing program 0: socket(0x6, 0x802, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff090000000f000100706669666f5f6661737400002400087d1c000100000000000000000000001900000000000000000000000000040002000600050009a30000"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=@delqdisc={0xa0, 0x25, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0x8, 0x2}, {0x7, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8ed}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40000008}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffdde}, @TCA_RATE={0x6, 0x5, {0x8, 0xdc}}, @TCA_RATE={0x6, 0x5, {0xb8, 0xd9}}, @qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{0x800004, 0x5, 0xaea, 0x3289, 0xfff, 0x96a}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x4}}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103da000000030000000e000000081f9a34", @ANYRES32=0x0, @ANYBLOB="0500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0xc805) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendfile(r3, r2, 0x0, 0x100000001) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x51018004}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="4655010000000000000043d2980b7178a6e6d76c7fd6d9dd20ffd9ff030a8b702c685d83960000008aef49707d9c0133c8c1e8f645f4528ce2e0a160084575b0935e5bb77426b803e26e85880d5a4237fe2dbe5f531fd4a76aacb2bc1c", @ANYRESOCT, @ANYBLOB="00012cbd7000fcdbdf250500000008000100000000000c0004000163ffffffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x24000081}, 0x16) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="8800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0100000004030000600012800e00010069703665727370616e0000004c000280060010004e240000060011004e1d00000400120008000c0007000000060010004e220000140007002001000000000000000000000000000105000b0006000000050008000200000008000a00", @ANYRES32=r8, @ANYBLOB="6166d335c8604acebf07a4a254"], 0x88}}, 0x0) 01:37:33 executing program 1: userfaultfd(0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:33 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000000140)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080), 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000001100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000180)) openat$sndseq(0xffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x11c00) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x1c}, 0x3}, 0x1c) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xc0241, 0x0) fdatasync(r5) ioctl$KDSETLED(r5, 0x4b32, 0x8) 01:37:33 executing program 1: userfaultfd(0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d68697d9d5b725f2de09cb7e44190f0c96df767d7e3c53fdbc6bd577d37efefd5fd79f4e2b7d4dd64930b0fbbac0602eef54a20"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 333.317156][ T32] audit: type=1400 audit(1595036253.552:15): avc: denied { sys_admin } for pid=9400 comm="syz-executor.0" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 01:37:33 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, 0x0, &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 333.377232][ T9402] IPVS: ftp: loaded support on port[0] = 21 [ 333.588751][ T32] audit: type=1400 audit(1595036253.842:16): avc: denied { net_admin } for pid=9420 comm="syz-executor.0" capability=12 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 333.603129][ T9403] IPVS: ftp: loaded support on port[0] = 21 01:37:34 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, 0x0, &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:34 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x20600, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x21}, 0x21) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r1, 0x4, 0x40400) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18}, 0x18) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) flock(r3, 0x0) write$P9_RWALK(r1, &(0x7f00000000c0)=ANY=[], 0x9) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r4, r3) 01:37:34 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, 0x0, &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 334.132317][ T32] audit: type=1804 audit(1595036254.382:17): pid=9455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 [ 334.197023][ T1596] tipc: TX() has been purged, node left! [ 334.256965][ T32] audit: type=1804 audit(1595036254.452:18): pid=9455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 [ 334.281471][ T32] audit: type=1804 audit(1595036254.482:19): pid=9455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 01:37:34 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 334.306046][ T32] audit: type=1804 audit(1595036254.502:20): pid=9455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 01:37:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00d350bf7e8a96900000000000000000000000f77d51668943654d888e99dffe439fa3e8ced92f674480b7a2feeeeccd357fcc744b072f85275fd89bdfccc4316a927344af2c10d8d2e9397e44915db6204efe86f098a9970dae4585a6b040f4b4bb2a4b437c018634401f2f8a0c26c99fba9456404801abe66012c1e012af51f506827bfc2a78b476e988f0f1d752cf6eae751aa13fec85abe4", @ANYRES32=0x0, @ANYBLOB="00000000108a00000400140008001b"], 0x2c}}, 0x0) [ 334.537952][ T32] audit: type=1804 audit(1595036254.592:21): pid=9455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 [ 334.562908][ T32] audit: type=1804 audit(1595036254.612:22): pid=9458 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 [ 334.587172][ T32] audit: type=1804 audit(1595036254.622:23): pid=9455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 [ 334.611330][ T32] audit: type=1804 audit(1595036254.632:24): pid=9455 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir064668004/syzkaller.fl25RO/29/bus" dev="sda1" ino=15770 res=1 01:37:35 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:35 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10082, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)="08014ee5cca71273445a2370ccb5a9b36753d352b33df6e6da851b32355ea2356eed7fd8", &(0x7f0000000140)=@tcp6=r0, 0x2}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 01:37:35 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:35 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6(0xa, 0xa, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) fadvise64(r1, 0x3, 0x10001, 0x4) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080), 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000000)) 01:37:35 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:35 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x42}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080), 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4015) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x48041}, 0x80) ioctl$BLKBSZSET(r3, 0x40041271, &(0x7f0000000000)=0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x82, &(0x7f00000001c0)={r7}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r7, 0x6, 0x3, [0xf801, 0x83, 0x7]}, &(0x7f00000001c0)=0xe) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r8, 0x7fffffff}, 0x8) 01:37:36 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r1, 0x200005) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="053d1dc43b2af5d5044a1663082dff"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x3f, 0x6, 0x66dd197c}) sendfile(r0, r1, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080000, 0x0, @perf_config_ext={0x7, 0x9}, 0x5, 0x4, 0x0, 0xf, 0x3ff}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x20800) r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="e404d36f791a") prctl$PR_SET_TSC(0x1a, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[], 0xa) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) socket$inet(0x2, 0x4, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 01:37:36 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x40808, &(0x7f0000000000)=ANY=[@ANYBLOB='dmask=000p0000000000000000000,\x00']) [ 336.128402][ T9495] IPVS: ftp: loaded support on port[0] = 21 01:37:36 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 336.661235][ T9491] IPVS: ftp: loaded support on port[0] = 21 01:37:37 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe42151b2816d504a98038e9d9ecff391f46727bf07b0d791a07b3d"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:37 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080), 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0xfffffffffffffdbe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 01:37:37 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 337.526763][ T1596] tipc: TX() has been purged, node left! 01:37:38 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x20, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002, r3, 0x300}}, 0x20}, 0x1, 0x5e}, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080), 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) dup3(r8, r5, 0x0) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c804}, 0x800) [ 337.969360][ T9556] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 01:37:38 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) [ 338.151053][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state 01:37:38 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, r2, 0x0) r3 = gettid() tkill(r3, 0x14) sendmsg$AUDIT_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x3e9, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x1, 0x0, r3, 0x5, 0x5, 0x1, 0x7f, 0x0, 0x3}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) keyctl$read(0xb, r0, 0x0, 0x0) 01:37:38 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3ee76658eb3cfa88d1728f4005d0665d0629dad870fc1cfe421"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:39 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3"], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:39 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:39 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:39 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='^(\x00', 0x3, 0x2) 01:37:40 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3"], 0x0, 0x0, 0x2) 01:37:40 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3"], 0x0, 0x0, 0x0) 01:37:40 executing program 1 (fault-call:1 fault-nth:0): r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3"], 0x0, 0x0, 0x0) 01:37:41 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3"], 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040)=0x3, 0x4) 01:37:41 executing program 1: r0 = userfaultfd(0x80800) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000001100)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000001100)) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000001100)) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRES64=r3], 0x0, 0x0, 0x2) 01:37:41 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000001100)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000180)={r2, 0x41d, 0x40, 0x8}) r3 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10040, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x140f, 0x2, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040c0) 01:37:42 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3"], 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000110}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 01:37:42 executing program 2: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10602, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x800) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x8d0}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x8d0}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250d0000009c000180140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e30000000000000000000140002006272696467655f736c6176655f300000140002007465616d30000000000000000000000008000300020000001400020074756e6c30000000000000000000000008000300020000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=r1, @ANYBLOB="2400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="300001800800030000000000080003000300000008000100", @ANYRES32=r8, @ANYBLOB="14000200765f17000000000000626f6e64000000"], 0x104}, 0x1, 0x0, 0x0, 0x2040}, 0x24004000) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="e96e6f646533322c67716e6f656e666f725d653961747472322c4000000000000000"]) [ 341.955605][ T9604] xfs: Unknown parameter 'énode32' 01:37:42 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x800, 0x400, 0x400, 0x401}) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7aa4e2b0208ecbf, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28000}, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x80}}, 0x40004) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x109240, 0x0) write$P9_RMKDIR(r4, &(0x7f0000000580)={0x14, 0x49, 0x1, {0x80, 0x4, 0x7}}, 0x14) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) rt_sigprocmask(0x1, &(0x7f0000000640)={[0x7fffffff, 0x3]}, &(0x7f0000000680), 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000006c0)=0x7) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000700)={0xfffffffa, 0x1, 0x7fffffff, 0x800, 0x80, 0xbaa1, 0x2}) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$FS_IOC_SETVERSION(r5, 0x40047602, &(0x7f0000000740)=0x3) 01:37:42 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3ca91dafb8cb82fb4ce22007173637505784e0580043ca346edb785f2dfe4dc28f8e4d94cf5e04936b7663d067d66c322d4be200ea0156a3b463729ea10a8e2075b751b9c559f3feff06ebbaa2f957be69aec81ae7d2bfa15ac4"], 0x0, 0x0, 0x0) [ 342.169607][ T9604] xfs: Unknown parameter 'énode32' 01:37:42 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080), 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = dup3(r3, r0, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x401, 0x7, 0xffffff57, 0x10000, 0xe1, "07c8eab65784d30747dc3a29634638f2a869a6"}) r5 = userfaultfd(0x0) fsetxattr(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="d0"], 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080), 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0cc5604, &(0x7f0000000340)={0x0, @win={{0x6, 0x4, 0x29, 0x9}, 0x4, 0x200, &(0x7f0000000180)={{0xce43, 0xffc, 0x10001, 0x3}, &(0x7f0000000140)={{0xffffffff, 0x1c2, 0x1, 0x7f800000}, &(0x7f0000000100)={{0x3ff, 0x1, 0x80000000, 0x1}}}}, 0x1, &(0x7f0000000240)="834d04762c55671609b855dca11327b31bf12310e9760332abb757b014a200e8876f5b075d7ea988d47a00bd112c1da4962220ce11752c33d90e38f607b3967bc41010ecadce70b9638d12248168f5c6251dcf4c7a9c7c31fe79abe151abc3f53561a59c92c473a4951eea0d68e7f737b5594d78c638aad7487785487a106ccf1e9daea97e8b53b31dd9f77fe376d74c219f98f332bc7e20b8cd019a70083d45f3f7c085b014bb0e39abfe8bb4be6458eba2762d20c0a803b18fe57a865655aadaf703241a9a9ee31fecd4f490bc4c64dc2e991e8194eb2ce9db7611ab55a069062fa2c49fe63210dc9bd88c1ed8aea6c7d7b8e908", 0x5}}) 01:37:42 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@cipso={0x86, 0x31, 0x0, [{0x7, 0x7, "4742ea99b4"}, {0x6, 0x9, "bba75732d8ecc5"}, {0x0, 0x9, "78a5ed55e371f2"}, {0x2, 0x12, "0054ebdb91ff3ad6f0114b4e284e9d02"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x43, [@dev={0xac, 0x14, 0x14, 0x3b}, @remote]}]}}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010100, @empty}}}}}}, 0x0) 01:37:43 executing program 1: userfaultfd(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) ioctl(r1, 0x7d, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000001100)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000001100)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000001100)) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000001100)) r5 = socket$inet6(0xa, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, &(0x7f0000001100)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x9, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x880) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="d719beb302494d3f5f6f4f6cdf527403d3a65ae2e2883792ffbfc403d4bc413f371193172ccfe8668f3b4d779d78b765933f5b29aaa79f73385dc0c03dcee5b173d5be377e909c5d4f5e4c7c5dc38a023000df5a8d90e58f84da51d70ce989b5e3d14a7a8a2cb99a62815af80a5f01a50a8946ef388c6f674e23ee0033377751c84097edfd49e8bc3b05752b4aa117390e7be4d808fa42c78d0a0711630690da1ce9", @ANYRESOCT, @ANYRESHEX=r6, @ANYRESDEC=r6, @ANYRES16, @ANYRES16, @ANYBLOB="798b20a0c756bc37532a08846b22c76fd6f93a5ec2e6d8a3675439b5c05513ba58fcbf2ca172df0378aa6a32a2455d964dda50d282d44f96d11e7b30c6b3ba9fdaa9a03e5671d5d353d53ccf69739044a569e35ae43bf305b9c5854eb0b48882f8b91c979844f005f77c3ba38e82781127ff8e7aa387e06dcd4a04d9ce1a6fac8acee3f5bcf3432600c0158e76ee249051724631954e8ad96a2ba66c4a5c19fefadab113f32eb305caed0971af8affd90394e81b2bfea3fc40996d32c73c", @ANYRESOCT=r3], 0x0, 0x0, 0x2) 01:37:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000280)={0x40, "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"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES64=r3], 0x48}}, 0x20000010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 343.004324][ T9626] IPVS: ftp: loaded support on port[0] = 21 01:37:43 executing program 1: r0 = userfaultfd(0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) dup3(r4, r1, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x6, 0xbb, 0x4}) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="83"], 0x0, 0x0, 0x0) 01:37:43 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c3"], 0x0, 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = gettid() tkill(r2, 0x14) ptrace$pokeuser(0x6, r2, 0x401, 0x70) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080), 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) dup3(r5, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000000)) [ 343.493020][ T9629] team0: Port device team_slave_1 removed 01:37:44 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080), 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, 0xffffffffffffffff, 0x0) r7 = gettid() tkill(r7, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x8, 0x5, 0xfff, 0x2, 'syz1\x00'}, 0x6, 0x20000442, 0x1, r7, 0x1, 0x8, 'syz1\x00', &(0x7f0000000100)=['route\x00'], 0x6, [], [0xfff, 0x1, 0x2, 0xff1d]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 344.003456][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.343626][ T9626] chnl_net:caif_netlink_parms(): no params data found [ 344.879761][ T9626] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.887433][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.897145][ T9626] device bridge_slave_0 entered promiscuous mode [ 345.022331][ T9626] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.029679][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.039359][ T9626] device bridge_slave_1 entered promiscuous mode [ 345.246824][ T9626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.304615][ T9626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.443772][ T9626] team0: Port device team_slave_0 added [ 345.507272][ T9626] team0: Port device team_slave_1 added [ 345.641149][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.650194][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.676420][ T9626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.839130][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.846185][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.872354][ T9626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.128868][ T9626] device hsr_slave_0 entered promiscuous mode [ 346.187245][ T9626] device hsr_slave_1 entered promiscuous mode [ 346.218534][ T9626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.226275][ T9626] Cannot create hsr debugfs directory 01:37:47 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=r1, @ANYRES32, @ANYRESOCT, @ANYBLOB="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"], 0x0, 0x0, 0x2) [ 346.780617][ T9626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.847360][ T9626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.917517][ T9626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.018165][ T9626] netdevsim netdevsim3 netdevsim3: renamed from eth3 01:37:47 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080), 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) dup3(r3, r0, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101080, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000000140)={0xfffffffe, 0x4, 0xffffffffffffffd4, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, 0x0, &(0x7f0000001100)) accept4$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) 01:37:47 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000000600)=@sack_info={0x0, 0x4, 0x1}, &(0x7f0000002000)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) r6 = dup3(r5, r2, 0x0) connect$unix(r5, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000006c0)={0x18, 0x0, 0x3, {0x800}}, 0x18) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, 0x0, &(0x7f0000001100)) r9 = open_tree(r6, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000005c0)={0x124, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/104, 0x68, 0x1, 0xf}, @fda={0x66646185, 0x4, 0x0, 0x2d}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x40}, @exit_looper, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @acquire_done, @free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/46, 0x2e, 0x2, 0x1b}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="852a62770001000000000000000000000000000000000000856164660582511b7813f73ebcd1f0bd5800000000000000010000000000000003000000", @ANYRES32=r9, @ANYBLOB="00000000001000000000040000000000"], &(0x7f0000000400)={0x0, 0x18, 0x34}}, 0x1000}], 0x25, 0x0, &(0x7f0000000580)="aa6019fd60812a3f617866c0f10ab75fc0b4a0a995b0b80b7c02a5a12d11f22831ba1de55b"}) fsetxattr(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7ce50692fc", @ANYRESHEX=r1], 0x0, 0x0, 0x1) [ 347.663490][ T9626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.774375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.784138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.833456][ T9626] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.890502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.901468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.911047][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.918458][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.001108][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.011116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.021447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.031398][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.038740][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.047886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.161633][ T9626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.173338][ T9626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.249827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.261598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.272544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.282985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.293696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.306140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.316818][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.327559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.337402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.483805][ T9626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.607795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.618345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.627575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.635418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.752883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.763337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.810703][ T9626] device veth0_vlan entered promiscuous mode [ 348.827262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.837650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.881875][ T9626] device veth1_vlan entered promiscuous mode [ 348.896257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.905684][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.024310][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.034585][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.066128][ T9626] device veth0_macvtap entered promiscuous mode [ 349.114685][ T9626] device veth1_macvtap entered promiscuous mode [ 349.171716][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.182891][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.192922][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.203475][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.213458][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.224016][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.238376][ T9626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.247519][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.257302][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.266877][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.277070][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.310283][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.322055][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.332093][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.342643][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.352631][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.363183][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.377647][ T9626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.387465][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.399975][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.112080][ T9890] QAT: Invalid ioctl [ 350.153246][ T9890] QAT: Invalid ioctl 01:37:50 executing program 1: r0 = userfaultfd(0x100c00) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x5}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000041}, 0x4004) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) msgrcv(r4, 0x0, 0x0, 0x1, 0x2000) msgsnd(r4, &(0x7f0000000000)={0x1}, 0x4, 0x0) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/200) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, &(0x7f0000001100)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r5, 0x81, 0x5, 0x99a}) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0) 01:37:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x1}}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400afb7db309e786d09e7accb615f0fc643fd2f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) 01:37:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={0x0, r5}) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, 0x0, &(0x7f0000001100)) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080), 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r2) dup3(r8, r1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x124, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x0) 01:37:50 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x97, 0x4) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x3f00) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) r2 = dup3(r1, r0, 0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x12, r4, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x801b, 0x5, 0x1ff, 0x0, 0x5}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r7 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400640, 0x0) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f00000000c0)=0x3) [ 350.373562][ T9898] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 350.413862][ T9897] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 350.558613][ T9897] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 01:37:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030500029300000000000000000000090400000000000002792e2e50c93b00000008000340000000000800010001000000"], 0x30}}, 0x0) 01:37:51 executing program 2: mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./bus\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000140)=@v3, 0x18, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x82, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000280)=0xffffffffffffffe8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x1b8d, 0x8}, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) [ 351.001274][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 01:37:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030500029300000000000000000000090400000000000002792e2e50c93b00000008000340000000000800010001000000"], 0x30}}, 0x0) [ 351.158130][ T9903] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 01:37:51 executing program 2: mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./bus\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000140)=@v3, 0x18, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x82, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000280)=0xffffffffffffffe8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x1b8d, 0x8}, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) [ 351.334876][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 01:37:51 executing program 1: r0 = userfaultfd(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000040)={{0x2, 0x0, @identifier="a730febbde82e6efe7fc820b24b786e2"}}) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="c3f62f2827e090afeb897eb6179613cd8355bb4a5b6215fe54049d147df66300f3caddd0ed35635cd178284fe511a56968da7f91c1e102d99395f0f690"], 0x0, 0x0, 0x0) 01:37:51 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknod(&(0x7f0000000380)='./bus\x00', 0x8000, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x2, 0x0) 01:37:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030500029300000000000000000000090400000000000002792e2e50c93b00000008000340000000000800010001000000"], 0x30}}, 0x0) [ 351.787168][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 01:37:52 executing program 1: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ba75ef352ab2950b74b18e372b6f3724cdcbf036e179cc119aacb218edb4cce3839e6424cfecbd4be82fd9449b44cfdb4619cbc6f403fb283be5d7391ded06fc75959a18d9b90a591faee25fef0153d7e2b77c380e0eebae8be800000000e0f5ae854774b29637d0fa45"], 0x0, 0x0, 0x0) 01:37:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030500029300000000000000000000090400000000000002792e2e50c93b00000008000340000000000800010001000000"], 0x30}}, 0x0) 01:37:52 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x800, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080), 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001080)={0xfffd, 0x0, 0x3, 0x0, 0x2, 0x4, 0x4000002}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r3) dup3(r7, r2, 0x0) write$P9_RXATTRCREATE(r7, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000001100)) fsetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0) [ 352.147674][ T1013] ===================================================== [ 352.154755][ T1013] BUG: KMSAN: uninit-value in bpf_skb_get_nlattr_nest+0x14c/0x2f0 [ 352.162589][ T1013] CPU: 1 PID: 1013 Comm: kworker/u4:10 Not tainted 5.8.0-rc5-syzkaller #0 [ 352.171091][ T1013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.181337][ T1013] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 352.189157][ T1013] Call Trace: [ 352.192475][ T1013] dump_stack+0x1df/0x240 [ 352.196829][ T1013] kmsan_report+0xf7/0x1e0 [ 352.201270][ T1013] __msan_warning+0x58/0xa0 [ 352.205802][ T1013] bpf_skb_get_nlattr_nest+0x14c/0x2f0 [ 352.211291][ T1013] ___bpf_prog_run+0x214d/0x97a0 [ 352.216253][ T1013] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 352.222448][ T1013] ? bpf_skb_get_nlattr+0x290/0x290 [ 352.227696][ T1013] __bpf_prog_run32+0x101/0x170 [ 352.232578][ T1013] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 352.238755][ T1013] ? kmsan_get_metadata+0x4f/0x180 [ 352.243878][ T1013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 352.249722][ T1013] ? ___bpf_prog_run+0x97a0/0x97a0 [ 352.254912][ T1013] packet_rcv+0x70f/0x2150 [ 352.259380][ T1013] ? packet_sock_destruct+0x1e0/0x1e0 [ 352.264817][ T1013] dev_queue_xmit_nit+0x11a0/0x1280 [ 352.270087][ T1013] dev_hard_start_xmit+0x20c/0xa70 [ 352.275246][ T1013] __dev_queue_xmit+0x2f8d/0x3b20 [ 352.280307][ T1013] ? kmsan_get_metadata+0x11d/0x180 [ 352.285557][ T1013] dev_queue_xmit+0x4b/0x60 [ 352.290167][ T1013] batadv_send_skb_packet+0x59b/0x8c0 [ 352.295581][ T1013] batadv_send_broadcast_skb+0x76/0x90 [ 352.301067][ T1013] batadv_iv_send_outstanding_bat_ogm_packet+0x97e/0xd50 [ 352.308136][ T1013] ? batadv_iv_ogm_queue_add+0x1900/0x1900 [ 352.313964][ T1013] process_one_work+0x1540/0x1f30 [ 352.319046][ T1013] worker_thread+0xed2/0x23f0 [ 352.323770][ T1013] kthread+0x515/0x550 [ 352.327882][ T1013] ? process_one_work+0x1f30/0x1f30 [ 352.333100][ T1013] ? kthread_blkcg+0xf0/0xf0 [ 352.337710][ T1013] ret_from_fork+0x22/0x30 [ 352.342141][ T1013] [ 352.344464][ T1013] Uninit was stored to memory at: [ 352.349501][ T1013] kmsan_internal_chain_origin+0xad/0x130 [ 352.355241][ T1013] __msan_chain_origin+0x50/0x90 [ 352.360192][ T1013] ___bpf_prog_run+0x6cbe/0x97a0 [ 352.365141][ T1013] __bpf_prog_run32+0x101/0x170 [ 352.369998][ T1013] packet_rcv+0x70f/0x2150 [ 352.374422][ T1013] dev_queue_xmit_nit+0x11a0/0x1280 [ 352.379634][ T1013] dev_hard_start_xmit+0x20c/0xa70 [ 352.384777][ T1013] __dev_queue_xmit+0x2f8d/0x3b20 [ 352.389815][ T1013] dev_queue_xmit+0x4b/0x60 [ 352.394331][ T1013] batadv_send_skb_packet+0x59b/0x8c0 [ 352.399715][ T1013] batadv_send_broadcast_skb+0x76/0x90 [ 352.405193][ T1013] batadv_iv_send_outstanding_bat_ogm_packet+0x97e/0xd50 [ 352.412232][ T1013] process_one_work+0x1540/0x1f30 [ 352.417274][ T1013] worker_thread+0xed2/0x23f0 [ 352.421951][ T1013] kthread+0x515/0x550 [ 352.426021][ T1013] ret_from_fork+0x22/0x30 [ 352.430428][ T1013] [ 352.432753][ T1013] Uninit was stored to memory at: [ 352.437789][ T1013] kmsan_internal_chain_origin+0xad/0x130 [ 352.443517][ T1013] __msan_chain_origin+0x50/0x90 [ 352.448468][ T1013] ___bpf_prog_run+0x6c64/0x97a0 [ 352.453410][ T1013] __bpf_prog_run32+0x101/0x170 [ 352.458267][ T1013] packet_rcv+0x70f/0x2150 [ 352.462691][ T1013] dev_queue_xmit_nit+0x11a0/0x1280 [ 352.467906][ T1013] dev_hard_start_xmit+0x20c/0xa70 [ 352.473029][ T1013] __dev_queue_xmit+0x2f8d/0x3b20 [ 352.478074][ T1013] dev_queue_xmit+0x4b/0x60 [ 352.482585][ T1013] batadv_send_skb_packet+0x59b/0x8c0 [ 352.487964][ T1013] batadv_send_broadcast_skb+0x76/0x90 [ 352.493436][ T1013] batadv_iv_send_outstanding_bat_ogm_packet+0x97e/0xd50 [ 352.500472][ T1013] process_one_work+0x1540/0x1f30 [ 352.505504][ T1013] worker_thread+0xed2/0x23f0 [ 352.510182][ T1013] kthread+0x515/0x550 [ 352.514272][ T1013] ret_from_fork+0x22/0x30 [ 352.518677][ T1013] [ 352.521001][ T1013] Local variable ----regs@__bpf_prog_run32 created at: [ 352.527861][ T1013] __bpf_prog_run32+0x87/0x170 [ 352.532632][ T1013] __bpf_prog_run32+0x87/0x170 [ 352.537386][ T1013] ===================================================== [ 352.544311][ T1013] Disabling lock debugging due to kernel taint [ 352.550463][ T1013] Kernel panic - not syncing: panic_on_warn set ... [ 352.557066][ T1013] CPU: 1 PID: 1013 Comm: kworker/u4:10 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 352.566950][ T1013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.577035][ T1013] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 352.584934][ T1013] Call Trace: [ 352.588267][ T1013] dump_stack+0x1df/0x240 [ 352.592618][ T1013] panic+0x3d5/0xc3e [ 352.596588][ T1013] kmsan_report+0x1df/0x1e0 [ 352.602340][ T1013] __msan_warning+0x58/0xa0 [ 352.606869][ T1013] bpf_skb_get_nlattr_nest+0x14c/0x2f0 [ 352.612363][ T1013] ___bpf_prog_run+0x214d/0x97a0 [ 352.617322][ T1013] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 352.623494][ T1013] ? bpf_skb_get_nlattr+0x290/0x290 [ 352.628730][ T1013] __bpf_prog_run32+0x101/0x170 [ 352.633607][ T1013] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 352.639792][ T1013] ? kmsan_get_metadata+0x4f/0x180 [ 352.644930][ T1013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 352.651723][ T1013] ? ___bpf_prog_run+0x97a0/0x97a0 [ 352.657214][ T1013] packet_rcv+0x70f/0x2150 [ 352.661685][ T1013] ? packet_sock_destruct+0x1e0/0x1e0 [ 352.667093][ T1013] dev_queue_xmit_nit+0x11a0/0x1280 [ 352.672442][ T1013] dev_hard_start_xmit+0x20c/0xa70 [ 352.677605][ T1013] __dev_queue_xmit+0x2f8d/0x3b20 [ 352.682741][ T1013] ? kmsan_get_metadata+0x11d/0x180 [ 352.688005][ T1013] dev_queue_xmit+0x4b/0x60 [ 352.692537][ T1013] batadv_send_skb_packet+0x59b/0x8c0 [ 352.697959][ T1013] batadv_send_broadcast_skb+0x76/0x90 [ 352.703447][ T1013] batadv_iv_send_outstanding_bat_ogm_packet+0x97e/0xd50 [ 352.710540][ T1013] ? batadv_iv_ogm_queue_add+0x1900/0x1900 [ 352.716372][ T1013] process_one_work+0x1540/0x1f30 [ 352.721455][ T1013] worker_thread+0xed2/0x23f0 [ 352.726191][ T1013] kthread+0x515/0x550 [ 352.730282][ T1013] ? process_one_work+0x1f30/0x1f30 [ 352.735605][ T1013] ? kthread_blkcg+0xf0/0xf0 [ 352.740225][ T1013] ret_from_fork+0x22/0x30 [ 352.746973][ T1013] Kernel Offset: 0x9a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 352.758521][ T1013] Rebooting in 86400 seconds..