[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. 2020/10/15 10:33:16 fuzzer started 2020/10/15 10:33:17 dialing manager at 10.128.0.26:34301 2020/10/15 10:33:17 syscalls: 3479 2020/10/15 10:33:17 code coverage: enabled 2020/10/15 10:33:17 comparison tracing: enabled 2020/10/15 10:33:17 extra coverage: enabled 2020/10/15 10:33:17 setuid sandbox: enabled 2020/10/15 10:33:17 namespace sandbox: enabled 2020/10/15 10:33:17 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/15 10:33:17 fault injection: enabled 2020/10/15 10:33:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/15 10:33:17 net packet injection: enabled 2020/10/15 10:33:17 net device setup: enabled 2020/10/15 10:33:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/15 10:33:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/15 10:33:17 USB emulation: enabled 2020/10/15 10:33:17 hci packet injection: enabled 2020/10/15 10:33:17 wifi device emulation: enabled 10:34:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 10:34:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) writev(r0, 0x0, 0x0) 10:34:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) 10:34:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 10:34:15 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 10:34:15 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000480)=""/4096, 0x1000) syzkaller login: [ 108.007066][ T6873] IPVS: ftp: loaded support on port[0] = 21 [ 108.245782][ T6875] IPVS: ftp: loaded support on port[0] = 21 [ 108.289504][ T6873] chnl_net:caif_netlink_parms(): no params data found [ 108.406367][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.444551][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.471754][ T6873] device bridge_slave_0 entered promiscuous mode [ 108.566358][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.574379][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.583001][ T6873] device bridge_slave_1 entered promiscuous mode [ 108.613853][ T6877] IPVS: ftp: loaded support on port[0] = 21 [ 108.626336][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.658724][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.694671][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 108.757816][ T6879] IPVS: ftp: loaded support on port[0] = 21 [ 108.762787][ T6873] team0: Port device team_slave_0 added [ 108.783408][ T6873] team0: Port device team_slave_1 added [ 108.914898][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.923294][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.956237][ T6881] IPVS: ftp: loaded support on port[0] = 21 [ 108.966446][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.010364][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.018840][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.060078][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.215783][ T6890] IPVS: ftp: loaded support on port[0] = 21 [ 109.238018][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.246156][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.256325][ T6875] device bridge_slave_0 entered promiscuous mode [ 109.270308][ T6873] device hsr_slave_0 entered promiscuous mode [ 109.278854][ T6873] device hsr_slave_1 entered promiscuous mode [ 109.329402][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.337002][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.348312][ T6875] device bridge_slave_1 entered promiscuous mode [ 109.385883][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 109.516134][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.595821][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.660579][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 109.688427][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.698000][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.712199][ T6877] device bridge_slave_0 entered promiscuous mode [ 109.727678][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.735354][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.743626][ T6877] device bridge_slave_1 entered promiscuous mode [ 109.789074][ T6875] team0: Port device team_slave_0 added [ 109.838622][ T6875] team0: Port device team_slave_1 added [ 109.898475][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.928194][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.952183][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 109.972558][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.979511][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.991413][ T12] Bluetooth: hci0: command 0x0409 tx timeout [ 110.013721][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.057137][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.067369][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.096191][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.197179][ T6877] team0: Port device team_slave_0 added [ 110.236310][ T2476] Bluetooth: hci1: command 0x0409 tx timeout [ 110.283856][ T6877] team0: Port device team_slave_1 added [ 110.333773][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 110.371396][ T6875] device hsr_slave_0 entered promiscuous mode [ 110.378229][ T6875] device hsr_slave_1 entered promiscuous mode [ 110.386479][ T6875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.394721][ T6875] Cannot create hsr debugfs directory [ 110.410837][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.417921][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.427163][ T6879] device bridge_slave_0 entered promiscuous mode [ 110.437875][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.445880][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.471576][ T4526] Bluetooth: hci2: command 0x0409 tx timeout [ 110.473324][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.528761][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.536680][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.546695][ T6879] device bridge_slave_1 entered promiscuous mode [ 110.555447][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.566974][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.593284][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.654245][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.664240][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.674589][ T6881] device bridge_slave_0 entered promiscuous mode [ 110.720929][ T2655] Bluetooth: hci3: command 0x0409 tx timeout [ 110.732911][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.739992][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.754422][ T6881] device bridge_slave_1 entered promiscuous mode [ 110.769036][ T6873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.795453][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.841509][ T6873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.859499][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.871262][ T12] Bluetooth: hci4: command 0x0409 tx timeout [ 110.875326][ T6877] device hsr_slave_0 entered promiscuous mode [ 110.891269][ T6877] device hsr_slave_1 entered promiscuous mode [ 110.897819][ T6877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.907332][ T6877] Cannot create hsr debugfs directory [ 110.922857][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.939121][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.949786][ T6873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.966163][ T6873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.989050][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.004318][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.012635][ T6890] device bridge_slave_0 entered promiscuous mode [ 111.026483][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.036341][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.047337][ T6890] device bridge_slave_1 entered promiscuous mode [ 111.104578][ T6879] team0: Port device team_slave_0 added [ 111.111093][ T4526] Bluetooth: hci5: command 0x0409 tx timeout [ 111.116301][ T6879] team0: Port device team_slave_1 added [ 111.155250][ T6881] team0: Port device team_slave_0 added [ 111.173928][ T6881] team0: Port device team_slave_1 added [ 111.185358][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.204851][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.285913][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.299849][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.330636][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.368583][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.378904][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.406891][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.420121][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.430607][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.458013][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.473070][ T6890] team0: Port device team_slave_0 added [ 111.487234][ T6890] team0: Port device team_slave_1 added [ 111.510112][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.518514][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.544891][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.587776][ T6881] device hsr_slave_0 entered promiscuous mode [ 111.609220][ T6881] device hsr_slave_1 entered promiscuous mode [ 111.616328][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.624499][ T6881] Cannot create hsr debugfs directory [ 111.691288][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.698260][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.724663][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.750024][ T6875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.760113][ T6875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.781404][ T6879] device hsr_slave_0 entered promiscuous mode [ 111.788344][ T6879] device hsr_slave_1 entered promiscuous mode [ 111.798595][ T6879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.807072][ T6879] Cannot create hsr debugfs directory [ 111.818651][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.826930][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.854260][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.895871][ T6875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.938640][ T6875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.068951][ T6890] device hsr_slave_0 entered promiscuous mode [ 112.075371][ T4526] Bluetooth: hci0: command 0x041b tx timeout [ 112.084921][ T6890] device hsr_slave_1 entered promiscuous mode [ 112.092418][ T6890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.099972][ T6890] Cannot create hsr debugfs directory [ 112.153701][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.257232][ T6877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.282449][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.296261][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.311401][ T12] Bluetooth: hci1: command 0x041b tx timeout [ 112.314904][ T6873] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.332567][ T6877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.390298][ T6877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.414652][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.425453][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.436359][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.443640][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.500063][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.511956][ T6877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.528990][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.537152][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.546699][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.551049][ T4526] Bluetooth: hci2: command 0x041b tx timeout [ 112.555616][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.567847][ T2476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.576789][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.647008][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.672784][ T6879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.689116][ T6879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.713249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.728760][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.738478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.747633][ T6879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.787074][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.793926][ T12] Bluetooth: hci3: command 0x041b tx timeout [ 112.794593][ T6879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.826868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.842574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.851385][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.859548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.868130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.877310][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.938596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.947515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.951160][ T4526] Bluetooth: hci4: command 0x041b tx timeout [ 112.966675][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.973842][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.982282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.990642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.001694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.046225][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.059129][ T6881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.073458][ T6881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.112578][ T6890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.127160][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.137167][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.145900][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.153062][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.162720][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.171843][ T6881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.200903][ T12] Bluetooth: hci5: command 0x041b tx timeout [ 113.229161][ T6873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.237033][ T6890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.255632][ T6890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.268439][ T6881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.278586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.294007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.304607][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.315019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.324253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.333722][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.345334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.356243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.364536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.384337][ T6890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.412996][ T6875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.425506][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.435225][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.443452][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.452521][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.537931][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.548638][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.588391][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.597681][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.636484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.644634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.663997][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.678467][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.708250][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.716765][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.725394][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.737921][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.747152][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.755638][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.764296][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.773022][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.790743][ T6873] device veth0_vlan entered promiscuous mode [ 113.815790][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.840306][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.849776][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.860318][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.867472][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.877819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.887222][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.896157][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.903406][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.911142][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.920271][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.936921][ T6873] device veth1_vlan entered promiscuous mode [ 113.951492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.960266][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.971669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.008732][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.021801][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.030400][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.039454][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.046606][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.054978][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.064296][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.073323][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.080366][ T2476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.101232][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.109891][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.159452][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.167041][ T4526] Bluetooth: hci0: command 0x040f tx timeout [ 114.168912][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.182702][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.192414][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.203408][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.214109][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.274836][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.284634][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.294972][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.305117][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.326114][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.334964][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.345170][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.357645][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.378661][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.391704][ T12] Bluetooth: hci1: command 0x040f tx timeout [ 114.417045][ T6873] device veth0_macvtap entered promiscuous mode [ 114.430307][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.440695][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.449529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.458769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.467960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.477377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.489438][ T6875] device veth0_vlan entered promiscuous mode [ 114.514262][ T6873] device veth1_macvtap entered promiscuous mode [ 114.527169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.537251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.546106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.555285][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.564019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.572900][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.581623][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.589510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.605256][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.621303][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.640974][ T4526] Bluetooth: hci2: command 0x040f tx timeout [ 114.653989][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.665283][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.679340][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.691002][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.698585][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.707852][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.719717][ T6890] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.739234][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.771745][ T6875] device veth1_vlan entered promiscuous mode [ 114.783763][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.795627][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.804860][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.815327][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.822501][ T7328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.830519][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.839989][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.848848][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.856019][ T7328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.864754][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.871094][ T4526] Bluetooth: hci3: command 0x040f tx timeout [ 114.876227][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.910779][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.918939][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.930678][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.940596][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.950765][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.959846][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.967080][ T8179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.976102][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.985342][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.994467][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.001695][ T8179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.010210][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.018686][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.027685][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.036559][ T4526] Bluetooth: hci4: command 0x040f tx timeout [ 115.055761][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.084632][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.094705][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.107414][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.117364][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.126572][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.136089][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.179234][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.186974][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.196206][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.212546][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.225912][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.234305][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.247758][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.258965][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.272314][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.272890][ T7328] Bluetooth: hci5: command 0x040f tx timeout [ 115.291816][ T6873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.300641][ T6873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.315203][ T6873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.324394][ T6873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.363830][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.372206][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.381154][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.389702][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.399113][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.408451][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.417552][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.427184][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.437368][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.462171][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.481426][ T6875] device veth0_macvtap entered promiscuous mode [ 115.489834][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.500259][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.510120][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.523915][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.532879][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.542634][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.555117][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.570226][ T6890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.583932][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.596735][ T6875] device veth1_macvtap entered promiscuous mode [ 115.610752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.619701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.628374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.637198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.650351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.671644][ T6879] device veth0_vlan entered promiscuous mode [ 115.743694][ T6879] device veth1_vlan entered promiscuous mode [ 115.803648][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.843696][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.865557][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.886094][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.905274][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.928195][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.942311][ T6877] device veth0_vlan entered promiscuous mode [ 115.955510][ T6875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.970509][ T6875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.986596][ T6875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.996758][ T6875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.008846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.021471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.036861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.045406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.059988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.076575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.084805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.092700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.101877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.144061][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.157507][ T6877] device veth1_vlan entered promiscuous mode [ 116.169300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.183077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.190674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.198782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.223275][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.231932][ T12] Bluetooth: hci0: command 0x0419 tx timeout [ 116.293019][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.302306][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.366644][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.399193][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.410614][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.431506][ T6879] device veth0_macvtap entered promiscuous mode [ 116.441888][ T6879] device veth1_macvtap entered promiscuous mode [ 116.463439][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.484936][ T17] Bluetooth: hci1: command 0x0419 tx timeout [ 116.509678][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.511489][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.529366][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.557596][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.568027][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.577635][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.606361][ T6877] device veth0_macvtap entered promiscuous mode [ 116.647644][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.665537][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.684296][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.695757][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.708578][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.717531][ T17] Bluetooth: hci2: command 0x0419 tx timeout [ 116.745484][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.767396][ T6877] device veth1_macvtap entered promiscuous mode [ 116.793074][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.814332][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.822353][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.841677][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.850796][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.860649][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.869639][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.880027][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.893979][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.906919][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.917863][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.928903][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.942558][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.961045][ T17] Bluetooth: hci3: command 0x0419 tx timeout [ 116.976456][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.987496][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.996551][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.005781][ T2655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.024515][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.027336][ T6879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.043955][ T6879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.049706][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.060268][ T6879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.077574][ T6879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.102075][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.111221][ T8179] Bluetooth: hci4: command 0x0419 tx timeout [ 117.127029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.145491][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 10:34:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0xffffffff, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) [ 117.185788][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.207310][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.229555][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.251351][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.268830][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.295067][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.324129][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.343567][ T6890] device veth0_vlan entered promiscuous mode [ 117.350635][ T6881] device veth0_vlan entered promiscuous mode [ 117.357652][ T2655] Bluetooth: hci5: command 0x0419 tx timeout [ 117.397138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.405351][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.421750][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.430474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.441793][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.450527][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.466830][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 10:34:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0xffffffff, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) [ 117.497670][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.540888][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.561023][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.578627][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 10:34:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 117.610884][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.632488][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.647962][ T6890] device veth1_vlan entered promiscuous mode [ 117.683969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.697911][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.720058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.739190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.752581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.765840][ T6877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 10:34:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000200000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94e09ad95ab308c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d990180000069392e0d0000556ec919d0b1681369d448c6f8a5cc77c14c8d4e7f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc31f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c4451b1edb61670ff2c62117e96eba22382758239c0449defd2aad967d9e293fad4e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6890ebda8f0dccb38de3c753fdb023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202ffca15500001981095805ff026bedb710cf8b82bc02c12fe01bd8df4e97c67e8a1d93b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a28d77ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077000000000056abdefce1b79d8029af8de217c23f79e68fe48420cbb226a752b817fcaaefaa3268c68d23659a581b7c43264c41ab25fe1c342f984027e6965fbe66ca8f312929c84fe57c60146599e9f7f215414601476eeb88d205fc1964a5225d002d7e994e425913f3e0d3b6d439f671abb0ebfa2ae43a47b081f3a4d4e56deaa121fa94494f8017e99e3bde075315005f483aff7014fa"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0xffffffff, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) [ 117.789083][ T6877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.805355][ T6877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.825485][ T6877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.893191][ T6881] device veth1_vlan entered promiscuous mode 10:34:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0xffffffff, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) [ 118.034291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.064072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.085228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.116998][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.128149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.146367][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.159238][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 10:34:25 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1a5, 0x300, 0x0) [ 118.186355][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.237424][ T6890] device veth0_macvtap entered promiscuous mode [ 118.270777][ T6881] device veth0_macvtap entered promiscuous mode [ 118.300182][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.315178][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.327498][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.348294][ T6890] device veth1_macvtap entered promiscuous mode [ 118.368725][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 10:34:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0xe}) [ 118.396872][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.438821][ T6881] device veth1_macvtap entered promiscuous mode [ 118.458686][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.487896][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.504059][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.526741][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.529256][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.542774][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.546537][ T8294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 10:34:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 118.590008][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.652507][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.674616][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.694552][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.716305][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.728800][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.740345][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.771973][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.787462][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.824522][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.852326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.882214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.916121][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.937089][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.950026][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.962489][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.973798][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.989486][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.010693][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.067859][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.079825][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.094655][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.104655][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.119048][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.124086][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.129712][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.147213][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.157721][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.169176][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.179373][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.189917][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.200034][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.211345][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.225877][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.234789][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.245153][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.254953][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.263951][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.276402][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.290568][ T6890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.302769][ T6890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.315458][ T6890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.326950][ T6890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.365991][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.378849][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.390720][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.405560][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.424280][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.446482][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:34:26 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r0) 10:34:26 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local=0x3}, 0x10) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 119.469330][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.492411][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.519413][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.545456][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.584278][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.626728][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.652189][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.667303][ T6881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.682534][ T6881] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.703519][ T6881] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.737870][ T6881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.932348][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.940349][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.959681][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.003145][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.019032][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.042842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.077840][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.090159][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.099005][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.106733][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.117668][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.129173][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:34:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x8000fffffffe) 10:34:27 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000480)=""/4096, 0x1000) 10:34:27 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) 10:34:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x1f0, 0x1f0, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'syzkaller1\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "28af776ef01dd1c99185bcd5bff952d3df75522f5e1f0bac01121fea0e19"}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'gretap0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 10:34:27 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 10:34:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 10:34:27 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401"], 0x28) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 120.352154][ T8384] overlayfs: filesystem on './file1' not supported as upperdir 10:34:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) r3 = creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) dup2(r2, r3) [ 120.497304][ C1] hrtimer: interrupt took 92867 ns 10:34:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r1 = socket(0x8000000000000010, 0x802, 0x0) write(r1, &(0x7f0000002580)="24000000210005fb006b000420ed38200a190008fd10b5000010ffea08000100050000b7", 0x24) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0xfffffffffffffe52) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="0200ff003fdf0e68f824f639399484", 0xf, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x22122) 10:34:28 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) 10:34:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x4}}}, @IFLA_NET_NS_FD={0x8}]}, 0x44}}, 0x0) 10:34:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:28 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) 10:34:28 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000480)=""/4096, 0x1000) [ 120.807170][ T8411] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 10:34:28 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 10:34:28 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) 10:34:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:29 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401"], 0x28) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:34:29 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 10:34:29 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000480)=""/4096, 0x1000) 10:34:29 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @timestamp={0x11, 0x11}}}}}, 0x0) 10:34:29 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010004507000000000000000072030000", @ANYRES32, @ANYBLOB="00010000000000002c0012000c000100626f6e64"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:34:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x41, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) write$evdev(r0, &(0x7f0000000040), 0x373) 10:34:29 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @timestamp={0x11, 0x11}}}}}, 0x0) [ 121.883801][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 10:34:29 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) [ 122.030411][ T8446] device bond1 entered promiscuous mode 10:34:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000002500)=[{&(0x7f0000000340)="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", 0x1fa, 0x6}]) 10:34:29 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 10:34:29 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @timestamp={0x11, 0x11}}}}}, 0x0) [ 122.379672][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.608768][ T8501] Dev loop5: unable to read RDB block 1 [ 122.630284][ T8501] loop5: unable to read partition table [ 122.648246][ T8501] loop5: partition table beyond EOD, truncated [ 122.681018][ T8501] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 10:34:30 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401"], 0x28) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:34:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='allow_utime=0']) 10:34:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000002500)=[{&(0x7f0000000340)="36538c79ba11027a578e0178696ac39550d4c03c882fdca5b0bcc76677712f82d3602d99c38813044ed03a7544965a6d64a4ff6f8d724e5791203b5cc9dbc2c08352d32d4ed288a8867fc399bafe359141821ea2f062c6471e2fd901599ea2031e50ef78b128abf06fed20601de0d243128a79432021a8c5583093bb6bb93baf98db01387846ff928d073b1da538be04a826477ccbe3fe641e27e505fd8ab2acfd9637346a9ccd53b173bd9acbd532f173bc6aec3d3a9cecf942d76abda74f2ca837fc36080c4e0634404df8f63c9dbeaba6796a97a11a859ce211f52404e44b57eb77e711799babeb39dbcdfba43b2ee3ddae184ee5925ab9458a81a602586395454f76c2ecd6d90593e4c58d0b4b2172a7dbdbb4d60fcf02312075ba292832eed66a5daf4c1b094ac1472484d61568edc3b14e1ed7f7273f2da4a9a78b944462cdd651adc73e5d1bb6d93a1cd54504556951429db2ea062654eee2bf5e61325ba4b33acb6f7ecf1d0dd677fef5915ba8d0d231a0d74b6e01e74516c38a9108fa5d42da35124fb318d20ed37bdae0d22c0eab1476957cb93eae10e4aad77011807cd1d6ab681b07498ea7a457cd99d4575dea4411e82fecc43d4d0d6e744625fe54fae0e90cda50ef2fa22c08a8835276f88d25aed0dfa149fc402bdb410a273b66ef44db8ee73a007162988ed162fa01694dccc54e0ead484f", 0x1fa, 0x6}]) 10:34:30 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @timestamp={0x11, 0x11}}}}}, 0x0) 10:34:30 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010004507000000000000000072030000", @ANYRES32, @ANYBLOB="00010000000000002c0012000c000100626f6e64"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:34:30 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/41, 0x29}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 122.932348][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.960240][ T8516] FAT-fs (loop2): bogus number of reserved sectors 10:34:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) [ 123.000722][ T8516] FAT-fs (loop2): Can't find a valid FAT filesystem [ 123.016808][ T8518] bond2 (uninitialized): Released all slaves [ 123.048608][ T8520] Dev loop5: unable to read RDB block 1 [ 123.074051][ T8520] loop5: unable to read partition table [ 123.101738][ T8520] loop5: partition table beyond EOD, truncated [ 123.148952][ T8520] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 123.185173][ T8527] sctp: [Deprecated]: syz-executor.0 (pid 8527) Use of struct sctp_assoc_value in delayed_ack socket option. 10:34:30 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002200)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000001200)=""/4096, 0x26, 0x1000, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) [ 123.185173][ T8527] Use struct sctp_sack_info instead [ 123.240188][ T8527] sctp: [Deprecated]: syz-executor.0 (pid 8527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.240188][ T8527] Use struct sctp_sack_info instead 10:34:30 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:34:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000002500)=[{&(0x7f0000000340)="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", 0x1fa, 0x6}]) 10:34:31 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010004507000000000000000072030000", @ANYRES32, @ANYBLOB="00010000000000002c0012000c000100626f6e64"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:34:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed, 0x0, 0x1}, 0xe) [ 123.606427][ T8540] Dev loop5: unable to read RDB block 1 [ 123.613647][ T8540] loop5: unable to read partition table [ 123.645715][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.668963][ T8540] loop5: partition table beyond EOD, truncated [ 123.722132][ T8540] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 123.762698][ T8544] bond2 (uninitialized): Released all slaves 10:34:31 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401"], 0x28) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:34:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000040)="f83e440f94a8de000000f0470fc0b1ee00000066420fae75fec40188128ffaffffff3626470f71f5e1c4029d0838c4e2bd3bae000000008f0808cfefa1660f38dbcf", 0x0, 0x0}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:34:31 executing program 2: eventfd2(0x0, 0x81001) 10:34:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000002500)=[{&(0x7f0000000340)="36538c79ba11027a578e0178696ac39550d4c03c882fdca5b0bcc76677712f82d3602d99c38813044ed03a7544965a6d64a4ff6f8d724e5791203b5cc9dbc2c08352d32d4ed288a8867fc399bafe359141821ea2f062c6471e2fd901599ea2031e50ef78b128abf06fed20601de0d243128a79432021a8c5583093bb6bb93baf98db01387846ff928d073b1da538be04a826477ccbe3fe641e27e505fd8ab2acfd9637346a9ccd53b173bd9acbd532f173bc6aec3d3a9cecf942d76abda74f2ca837fc36080c4e0634404df8f63c9dbeaba6796a97a11a859ce211f52404e44b57eb77e711799babeb39dbcdfba43b2ee3ddae184ee5925ab9458a81a602586395454f76c2ecd6d90593e4c58d0b4b2172a7dbdbb4d60fcf02312075ba292832eed66a5daf4c1b094ac1472484d61568edc3b14e1ed7f7273f2da4a9a78b944462cdd651adc73e5d1bb6d93a1cd54504556951429db2ea062654eee2bf5e61325ba4b33acb6f7ecf1d0dd677fef5915ba8d0d231a0d74b6e01e74516c38a9108fa5d42da35124fb318d20ed37bdae0d22c0eab1476957cb93eae10e4aad77011807cd1d6ab681b07498ea7a457cd99d4575dea4411e82fecc43d4d0d6e744625fe54fae0e90cda50ef2fa22c08a8835276f88d25aed0dfa149fc402bdb410a273b66ef44db8ee73a007162988ed162fa01694dccc54e0ead484f", 0x1fa, 0x6}]) 10:34:31 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010004507000000000000000072030000", @ANYRES32, @ANYBLOB="00010000000000002c0012000c000100626f6e64"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:34:31 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/41, 0x29}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 124.447659][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.462032][ T8561] Dev loop5: unable to read RDB block 1 [ 124.467748][ T8561] loop5: unable to read partition table [ 124.483739][ T8561] loop5: partition table beyond EOD, truncated [ 124.502090][ T8561] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 124.570234][ T8568] bond2 (uninitialized): Released all slaves 10:34:32 executing program 2: r0 = io_uring_setup(0x7558, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 10:34:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3, 'syz1\x00'}) 10:34:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x109, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x3d) 10:34:32 executing program 2: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000000009) 10:34:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 10:34:32 executing program 5: r0 = socket(0x22, 0x2, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 125.120288][ T8606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 10:34:33 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4aa8093028000000000000000000000390009002d0002000000000819000500d94d029f55a4201c99f8d23335ff21329dc9d939c0edfe800010000000dc1338d54400009b84132000", 0x55}], 0x1}, 0x0) 10:34:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 10:34:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xffffffc0}]}) 10:34:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000740)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @remote}, 'lo\x00'}) 10:34:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x206, 0x3a8, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x78}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @ipv4={[], [], @empty}, @local, @remote, @mcast2, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @local, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private0]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 10:34:33 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/41, 0x29}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 10:34:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0xb}}]}, 0x28}}, 0x0) 10:34:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) 10:34:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8919, 0x0) 10:34:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 10:34:33 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000003c0), 0x4) 10:34:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:34:33 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x3304, 0x0) 10:34:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8919, 0x0) 10:34:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) write$vhost_msg(r0, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 10:34:33 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x2a881, 0x0) write$dsp(r0, &(0x7f0000000340)="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", 0x1000) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000300)) 10:34:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8919, 0x0) 10:34:34 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/41, 0x29}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 10:34:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:34:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) write$vhost_msg(r0, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 10:34:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:34:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8919, 0x0) [ 127.151656][ C1] [ 127.154022][ C1] ======================================================== [ 127.161209][ C1] WARNING: possible irq lock inversion dependency detected [ 127.168410][ C1] 5.9.0-syzkaller #0 Not tainted [ 127.173333][ C1] -------------------------------------------------------- [ 127.180507][ C1] syz-executor.3/8677 just changed the state of lock: [ 127.187247][ C1] ffff88809a5af908 (&group->lock){..-.}-{2:2}, at: snd_pcm_period_elapsed+0x2c/0x210 [ 127.196797][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 127.204757][ C1] (&card->ctl_files_rwlock){.+.+}-{2:2} [ 127.204777][ C1] [ 127.204777][ C1] [ 127.204777][ C1] and interrupts could create inverse lock ordering between them. [ 127.204777][ C1] [ 127.224687][ C1] [ 127.224687][ C1] other info that might help us debug this: [ 127.232734][ C1] Possible interrupt unsafe locking scenario: [ 127.232734][ C1] [ 127.241041][ C1] CPU0 CPU1 [ 127.246426][ C1] ---- ---- [ 127.251775][ C1] lock(&card->ctl_files_rwlock); [ 127.256875][ C1] local_irq_disable(); [ 127.263612][ C1] lock(&group->lock); [ 127.270272][ C1] lock(&card->ctl_files_rwlock); [ 127.277888][ C1] [ 127.281685][ C1] lock(&group->lock); [ 127.286028][ C1] [ 127.286028][ C1] *** DEADLOCK *** [ 127.286028][ C1] [ 127.294169][ C1] 1 lock held by syz-executor.3/8677: [ 127.299519][ C1] #0: ffffc90000da8db0 ((&dpcm->timer)){+.-.}-{0:0}, at: call_timer_fn+0x57/0x160 [ 127.308842][ C1] [ 127.308842][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 127.318212][ C1] -> (&card->ctl_files_rwlock){.+.+}-{2:2} { [ 127.324283][ C1] HARDIRQ-ON-R at: [ 127.328355][ C1] lock_acquire+0x160/0x710 [ 127.334698][ C1] _raw_read_lock+0x32/0x40 [ 127.341032][ C1] snd_ctl_notify+0x86/0x550 [ 127.347443][ C1] __snd_ctl_add_replace+0x582/0x8a0 [ 127.354550][ C1] snd_ctl_add+0x6e/0x110 [ 127.360696][ C1] snd_dummy_probe+0xb9e/0x1000 [ 127.367359][ C1] platform_drv_probe+0xcd/0x150 [ 127.374125][ C1] really_probe+0x753/0x1110 [ 127.380526][ C1] driver_probe_device+0x106/0x1a0 [ 127.387449][ C1] bus_for_each_drv+0x108/0x170 [ 127.394191][ C1] __device_attach+0x262/0x3f0 [ 127.400764][ C1] bus_probe_device+0xb8/0x1f0 [ 127.407348][ C1] device_add+0x1630/0x19b0 [ 127.413685][ C1] platform_device_add+0x4ad/0x6e0 [ 127.420628][ C1] platform_device_register_full+0x448/0x530 [ 127.428432][ C1] alsa_card_dummy_init+0x1b3/0x398 [ 127.435640][ C1] do_one_initcall+0x14b/0x350 [ 127.442224][ C1] do_initcall_level+0x101/0x14c [ 127.448970][ C1] do_initcalls+0x59/0x9b [ 127.455107][ C1] kernel_init_freeable+0x356/0x474 [ 127.462112][ C1] kernel_init+0xd/0x290 [ 127.468162][ C1] ret_from_fork+0x1f/0x30 [ 127.474387][ C1] SOFTIRQ-ON-R at: [ 127.478707][ C1] lock_acquire+0x160/0x710 [ 127.485017][ C1] _raw_read_lock+0x32/0x40 [ 127.491348][ C1] snd_ctl_notify+0x86/0x550 [ 127.497748][ C1] __snd_ctl_add_replace+0x582/0x8a0 [ 127.504847][ C1] snd_ctl_add+0x6e/0x110 [ 127.510986][ C1] snd_dummy_probe+0xb9e/0x1000 [ 127.517670][ C1] platform_drv_probe+0xcd/0x150 [ 127.524433][ C1] really_probe+0x753/0x1110 [ 127.530940][ C1] driver_probe_device+0x106/0x1a0 [ 127.537866][ C1] bus_for_each_drv+0x108/0x170 [ 127.544541][ C1] __device_attach+0x262/0x3f0 [ 127.552074][ C1] bus_probe_device+0xb8/0x1f0 [ 127.558675][ C1] device_add+0x1630/0x19b0 [ 127.565013][ C1] platform_device_add+0x4ad/0x6e0 [ 127.571946][ C1] platform_device_register_full+0x448/0x530 [ 127.579751][ C1] alsa_card_dummy_init+0x1b3/0x398 [ 127.586772][ C1] do_one_initcall+0x14b/0x350 [ 127.593350][ C1] do_initcall_level+0x101/0x14c [ 127.600096][ C1] do_initcalls+0x59/0x9b [ 127.606231][ C1] kernel_init_freeable+0x356/0x474 [ 127.613342][ C1] kernel_init+0xd/0x290 [ 127.619396][ C1] ret_from_fork+0x1f/0x30 [ 127.625621][ C1] INITIAL USE at: [ 127.629604][ C1] lock_acquire+0x160/0x710 [ 127.635826][ C1] _raw_write_lock_irqsave+0xaa/0xd0 [ 127.642870][ C1] snd_ctl_open+0x322/0x480 [ 127.649092][ C1] chrdev_open+0x498/0x580 [ 127.655244][ C1] do_dentry_open+0x7c8/0x1010 [ 127.661727][ C1] path_openat+0x2794/0x3840 [ 127.668041][ C1] do_filp_open+0x191/0x3a0 [ 127.674259][ C1] do_sys_openat2+0x463/0x830 [ 127.680656][ C1] __x64_sys_open+0x1af/0x1e0 [ 127.687054][ C1] do_syscall_64+0x31/0x70 [ 127.693189][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 127.700817][ C1] INITIAL READ USE at: [ 127.705222][ C1] lock_acquire+0x160/0x710 [ 127.711879][ C1] _raw_read_lock+0x32/0x40 [ 127.718533][ C1] snd_ctl_notify+0x86/0x550 [ 127.725290][ C1] __snd_ctl_add_replace+0x582/0x8a0 [ 127.732726][ C1] snd_ctl_add+0x6e/0x110 [ 127.739217][ C1] snd_dummy_probe+0xb9e/0x1000 [ 127.746311][ C1] platform_drv_probe+0xcd/0x150 [ 127.753400][ C1] really_probe+0x753/0x1110 [ 127.760166][ C1] driver_probe_device+0x106/0x1a0 [ 127.767429][ C1] bus_for_each_drv+0x108/0x170 [ 127.774443][ C1] __device_attach+0x262/0x3f0 [ 127.781369][ C1] bus_probe_device+0xb8/0x1f0 [ 127.789764][ C1] device_add+0x1630/0x19b0 [ 127.796419][ C1] platform_device_add+0x4ad/0x6e0 [ 127.803688][ C1] platform_device_register_full+0x448/0x530 [ 127.811919][ C1] alsa_card_dummy_init+0x1b3/0x398 [ 127.819442][ C1] do_one_initcall+0x14b/0x350 [ 127.826358][ C1] do_initcall_level+0x101/0x14c [ 127.833456][ C1] do_initcalls+0x59/0x9b [ 127.839938][ C1] kernel_init_freeable+0x356/0x474 [ 127.847289][ C1] kernel_init+0xd/0x290 [ 127.853696][ C1] ret_from_fork+0x1f/0x30 [ 127.860255][ C1] } [ 127.862848][ C1] ... key at: [] snd_card_new.__key.3+0x0/0x10 [ 127.871144][ C1] ... acquired at: [ 127.875106][ C1] lock_acquire+0x160/0x710 [ 127.879763][ C1] _raw_read_lock+0x32/0x40 [ 127.884440][ C1] snd_ctl_notify+0x86/0x550 [ 127.889186][ C1] loopback_trigger+0xc40/0x1500 [ 127.894276][ C1] snd_pcm_start+0x471/0x6c0 [ 127.899028][ C1] __snd_pcm_lib_xfer+0xf73/0x1320 [ 127.904290][ C1] snd_pcm_oss_write3+0x209/0x330 [ 127.909467][ C1] snd_pcm_plug_write_transfer+0x28b/0x490 [ 127.915433][ C1] snd_pcm_oss_write2+0x156/0x370 [ 127.920609][ C1] snd_pcm_oss_write+0x911/0xd70 [ 127.925701][ C1] vfs_write+0x2dd/0xd20 [ 127.930097][ C1] ksys_write+0x11b/0x220 [ 127.934591][ C1] do_syscall_64+0x31/0x70 [ 127.939283][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 127.945328][ C1] [ 127.947641][ C1] -> (&group->lock){..-.}-{2:2} { [ 127.954853][ C1] IN-SOFTIRQ-W at: [ 127.958824][ C1] lock_acquire+0x160/0x710 [ 127.964983][ C1] _raw_spin_lock_irqsave+0xaa/0xd0 [ 127.971814][ C1] snd_pcm_period_elapsed+0x2c/0x210 [ 127.978749][ C1] call_timer_fn+0x91/0x160 [ 127.984882][ C1] __run_timers+0x65e/0x830 [ 127.991016][ C1] run_timer_softirq+0x46/0x80 [ 127.997423][ C1] __do_softirq+0x256/0x6e0 [ 128.003555][ C1] asm_call_irq_on_stack+0xf/0x20 [ 128.010224][ C1] do_softirq_own_stack+0x9a/0xf0 [ 128.017141][ C1] __irq_exit_rcu+0x21f/0x230 [ 128.023462][ C1] irq_exit_rcu+0x5/0x20 [ 128.029436][ C1] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 128.036699][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 128.044317][ C1] kmem_cache_free+0x9e/0xf0 [ 128.050622][ C1] do_symlinkat+0x3aa/0x420 [ 128.056756][ C1] do_syscall_64+0x31/0x70 [ 128.062857][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 128.070388][ C1] INITIAL USE at: [ 128.074280][ C1] lock_acquire+0x160/0x710 [ 128.080330][ C1] _raw_spin_lock_irq+0xa6/0xc0 [ 128.086735][ C1] snd_pcm_hw_params+0xca/0x16b0 [ 128.093217][ C1] snd_pcm_oss_change_params_locked+0x25e0/0x4410 [ 128.101179][ C1] snd_pcm_oss_write+0x269/0xd70 [ 128.107684][ C1] vfs_write+0x2dd/0xd20 [ 128.113475][ C1] ksys_write+0x11b/0x220 [ 128.119352][ C1] do_syscall_64+0x31/0x70 [ 128.125333][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 128.132776][ C1] } [ 128.135274][ C1] ... key at: [] snd_pcm_group_init.__key+0x0/0x10 [ 128.145111][ C1] ... acquired at: [ 128.148919][ C1] __lock_acquire+0xa67/0x2bd0 [ 128.153851][ C1] lock_acquire+0x160/0x710 [ 128.159307][ C1] _raw_spin_lock_irqsave+0xaa/0xd0 [ 128.164866][ C1] snd_pcm_period_elapsed+0x2c/0x210 [ 128.170419][ C1] call_timer_fn+0x91/0x160 [ 128.175107][ C1] __run_timers+0x65e/0x830 [ 128.179856][ C1] run_timer_softirq+0x46/0x80 [ 128.184954][ C1] __do_softirq+0x256/0x6e0 [ 128.189979][ C1] asm_call_irq_on_stack+0xf/0x20 [ 128.195163][ C1] do_softirq_own_stack+0x9a/0xf0 [ 128.200358][ C1] __irq_exit_rcu+0x21f/0x230 [ 128.205473][ C1] irq_exit_rcu+0x5/0x20 [ 128.210157][ C1] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 128.216761][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 128.224408][ C1] kmem_cache_free+0x9e/0xf0 [ 128.229965][ C1] do_symlinkat+0x3aa/0x420 [ 128.235450][ C1] do_syscall_64+0x31/0x70 [ 128.240467][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 128.247476][ C1] [ 128.249874][ C1] [ 128.249874][ C1] stack backtrace: [ 128.256198][ C1] CPU: 1 PID: 8677 Comm: syz-executor.3 Not tainted 5.9.0-syzkaller #0 [ 128.264443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.274614][ C1] Call Trace: [ 128.277932][ C1] [ 128.280799][ C1] dump_stack+0x1d6/0x29e [ 128.286025][ C1] print_irq_inversion_bug+0xa5c/0xd70 [ 128.291669][ C1] ? stack_trace_save+0xad/0x150 [ 128.296687][ C1] ? __bfs+0x2e6/0x5c0 [ 128.300984][ C1] mark_lock+0xe80/0x2050 [ 128.305401][ C1] ? ktime_get+0x4a/0x150 [ 128.310650][ C1] ? ktime_get+0x123/0x150 [ 128.316182][ C1] ? native_apic_msr_write+0x70/0x80 [ 128.322979][ C1] ? clockevents_program_event+0x214/0x2d0 [ 128.329339][ C1] ? mark_lock+0x137/0x2050 [ 128.334019][ C1] __lock_acquire+0xa67/0x2bd0 [ 128.338791][ C1] ? lock_is_held_type+0xc8/0x100 [ 128.343817][ C1] lock_acquire+0x160/0x710 [ 128.348340][ C1] ? snd_pcm_period_elapsed+0x2c/0x210 [ 128.354326][ C1] ? _raw_spin_lock_irqsave+0x84/0xd0 [ 128.359800][ C1] _raw_spin_lock_irqsave+0xaa/0xd0 [ 128.366071][ C1] ? snd_pcm_period_elapsed+0x2c/0x210 [ 128.372587][ C1] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 128.379660][ C1] snd_pcm_period_elapsed+0x2c/0x210 [ 128.387221][ C1] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 128.395236][ C1] call_timer_fn+0x91/0x160 [ 128.400093][ C1] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 128.406620][ C1] __run_timers+0x65e/0x830 [ 128.411307][ C1] ? sched_clock+0x36/0x40 [ 128.415736][ C1] run_timer_softirq+0x46/0x80 [ 128.420492][ C1] __do_softirq+0x256/0x6e0 [ 128.424995][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 128.430241][ C1] asm_call_irq_on_stack+0xf/0x20 [ 128.435260][ C1] [ 128.438218][ C1] do_softirq_own_stack+0x9a/0xf0 [ 128.443627][ C1] __irq_exit_rcu+0x21f/0x230 [ 128.449199][ C1] irq_exit_rcu+0x5/0x20 [ 128.453440][ C1] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 128.459061][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 128.465237][ C1] RIP: 0010:kmem_cache_free+0x9e/0xf0 [ 128.471141][ C1] Code: 48 89 df 4c 89 fe 4c 89 e2 e8 2e 40 00 00 84 c0 74 34 41 f7 c6 00 02 00 00 75 3f 48 83 3d d9 98 d7 07 00 74 44 4c 89 f7 57 9d <0f> 1f 44 00 00 4c 89 e7 4c 89 fe 5b 41 5c 41 5e 41 5f eb 3e 5b 41 [ 128.492643][ C1] RSP: 0018:ffffc900087bfea8 EFLAGS: 00000286 [ 128.498878][ C1] RAX: 00000000000002bf RBX: ffff8880aa624e00 RCX: ffff888053aee200 [ 128.508691][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286 [ 128.516648][ C1] RBP: ffff8880a1ebac20 R08: ffffffff817b9c80 R09: 0000000000000007 [ 128.524604][ C1] R10: ffffffff88800000 R11: ffffffff888006e0 R12: ffffffff81c3f56a [ 128.532661][ C1] R13: 0000000000000000 R14: 0000000000000286 R15: ffff8880a1ebac00 [ 128.540632][ C1] ? do_symlinkat+0x3aa/0x420 [ 128.545298][ C1] ? __do_softirq+0x6e0/0x6e0 [ 128.549959][ C1] ? __entry_text_end+0x1feb86/0x1feb86 [ 128.555503][ C1] ? trace_hardirqs_on+0x30/0x80 [ 128.560452][ C1] do_symlinkat+0x3aa/0x420 [ 128.564949][ C1] do_syscall_64+0x31/0x70 [ 128.569362][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 128.575240][ C1] RIP: 0033:0x45db87 [ 128.579119][ C1] Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 128.598713][ C1] RSP: 002b:00007ffd9241b568 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 128.607117][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045db87 [ 128.615079][ C1] RDX: 00007ffd9241b603 RSI: 00000000004c3889 RDI: 00007ffd9241b5f0 [ 128.623935][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 128.631910][ C1] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 [ 128.639867][ C1] R13: 00007ffd9241b5a0 R14: 0000000000000000 R15: 00007ffd9241b5b0 10:34:36 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/d=\xf0\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) 10:34:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:34:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x410, 0x0, 0x130, 0x8203, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond=[0x2], 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d00"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x460) 10:34:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) write$vhost_msg(r0, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 10:34:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:34:36 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/d=\xf0\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) 10:34:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 128.958169][ T8704] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT 10:34:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) write$vhost_msg(r0, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 10:34:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x410, 0x0, 0x130, 0x8203, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond=[0x2], 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d00"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x460) 10:34:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:34:36 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/d=\xf0\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) 10:34:36 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='/d=\xf0\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) 10:34:36 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="d800000018008100e00f80ecdb4cb902021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600400001000200000094060402026efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec69, 0x0) 10:34:36 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='/d=\xf0\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) 10:34:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x58, 0x0, 0x0, 0x0) 10:34:36 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='/d=\xf0\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) [ 129.304619][ T8728] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.322888][ T8730] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT 10:34:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x20008810, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80) 10:34:36 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x410, 0x0, 0x130, 0x8203, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond=[0x2], 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d00"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x460) 10:34:36 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="d800000018008100e00f80ecdb4cb902021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600400001000200000094060402026efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec69, 0x0) 10:34:36 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='/d=\xf0\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8c000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) 10:34:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x20008810, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80) 10:34:37 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) [ 129.477836][ T8749] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 129.500040][ T8751] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 10:34:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x410, 0x0, 0x130, 0x8203, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond=[0x2], 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d00"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x460) 10:34:37 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x20008810, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80) 10:34:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x58, 0x0, 0x0, 0x0) 10:34:37 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="d800000018008100e00f80ecdb4cb902021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600400001000200000094060402026efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec69, 0x0) 10:34:37 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:37 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x20008810, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80) [ 129.595938][ T8765] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT 10:34:37 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:37 executing program 3: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xaca0}], 0x1, &(0x7f0000000040)) 10:34:37 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) [ 129.752086][ T8779] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 10:34:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x58, 0x0, 0x0, 0x0) 10:34:37 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:37 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:37 executing program 2: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:37 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10:34:37 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="d800000018008100e00f80ecdb4cb902021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600400001000200000094060402026efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec69, 0x0) 10:34:37 executing program 3: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xaca0}], 0x1, &(0x7f0000000040)) 10:34:37 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, 0x0) 10:34:37 executing program 3: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xaca0}], 0x1, &(0x7f0000000040)) 10:34:37 executing program 2: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:37 executing program 0: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) [ 129.985295][ T8806] ceph: Bad value for 'source' [ 129.997204][ T8812] ceph: Bad value for 'source' [ 130.007319][ T8809] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 10:34:37 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, 0x0) [ 130.092292][ T8821] ceph: Bad value for 'source' 10:34:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x58, 0x0, 0x0, 0x0) 10:34:38 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, 0x0) 10:34:38 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 3: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xaca0}], 0x1, &(0x7f0000000040)) 10:34:38 executing program 0: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 2: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 3: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, 0x0) 10:34:38 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) [ 130.613923][ T8838] ceph: Bad value for 'source' 10:34:38 executing program 2: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 0: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 3: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 5: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) [ 130.727663][ T8851] ceph: Bad value for 'source' 10:34:38 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xc0, &(0x7f0000000040)=""/192}, &(0x7f0000000100)="863a1eed3531", 0x0, 0x0, 0x0, 0x0, 0x0}) 10:34:38 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:34:38 executing program 3: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 5: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 5: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000080)=""/164) 10:34:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xc0, &(0x7f0000000040)=""/192}, &(0x7f0000000100)="863a1eed3531", 0x0, 0x0, 0x0, 0x0, 0x0}) 10:34:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:34:38 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:34:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xc0, &(0x7f0000000040)=""/192}, &(0x7f0000000100)="863a1eed3531", 0x0, 0x0, 0x0, 0x0, 0x0}) 10:34:38 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:34:38 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:34:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 4: syz_mount_image$romfs(&(0x7f0000000600)='romfs\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000940)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/renderD128\x00'}}]}) 10:34:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000680)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xc0, &(0x7f0000000040)=""/192}, &(0x7f0000000100)="863a1eed3531", 0x0, 0x0, 0x0, 0x0, 0x0}) 10:34:38 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:34:38 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:34:38 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='/\x00') socketpair(0x22, 0x2, 0x11, &(0x7f00000001c0)) 10:34:38 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, 0x0) 10:34:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x150, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 131.242989][ T8913] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 131.253740][ T8913] VFS: Can't find a romfs filesystem on dev loop4. [ 131.253740][ T8913] 10:34:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) [ 131.285070][ T8923] delete_channel: no stack 10:34:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x8}) [ 131.334181][ T8923] delete_channel: no stack 10:34:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x150, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 131.405994][ T8913] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 131.416718][ T8913] VFS: Can't find a romfs filesystem on dev loop4. [ 131.416718][ T8913] 10:34:38 executing program 4: syz_mount_image$romfs(&(0x7f0000000600)='romfs\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000940)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/renderD128\x00'}}]}) 10:34:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x150, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:34:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}}, 0x0) 10:34:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x8}) 10:34:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x150, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:34:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x8}) 10:34:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x150, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:34:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x150, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:34:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x8}) 10:34:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}}, 0x0) 10:34:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}}, 0x0) [ 131.590653][ T8955] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 131.664122][ T8955] VFS: Can't find a romfs filesystem on dev loop4. [ 131.664122][ T8955] 10:34:39 executing program 4: syz_mount_image$romfs(&(0x7f0000000600)='romfs\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000940)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/renderD128\x00'}}]}) 10:34:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x150, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:34:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}}, 0x0) 10:34:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) [ 131.822995][ T8983] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 131.862935][ T8983] VFS: Can't find a romfs filesystem on dev loop4. [ 131.862935][ T8983] 10:34:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 4: syz_mount_image$romfs(&(0x7f0000000600)='romfs\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000940)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/renderD128\x00'}}]}) 10:34:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) [ 132.035869][ T9013] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 132.043524][ T9013] VFS: Can't find a romfs filesystem on dev loop4. [ 132.043524][ T9013] 10:34:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) 10:34:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffffd5}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x33, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:34:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:39 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffffd5}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x33, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:34:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:40 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x0, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) 10:34:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffffd5}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x33, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:34:40 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:40 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:40 executing program 3: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 10:34:40 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffffd5}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x33, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:34:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x4) 10:34:40 executing program 2: syz_io_uring_setup(0x3e19, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000140), 0x0) 10:34:40 executing program 5: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 3: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 10:34:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000dc0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000002c0), 0x4) 10:34:40 executing program 0: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 10:34:40 executing program 2: syz_io_uring_setup(0x3e19, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000140), 0x0) 10:34:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x4) 10:34:40 executing program 5: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 4: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 3: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 10:34:40 executing program 0: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 10:34:40 executing program 5: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x4) 10:34:40 executing program 2: syz_io_uring_setup(0x3e19, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000140), 0x0) 10:34:40 executing program 3: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 10:34:40 executing program 4: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 0: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 10:34:40 executing program 5: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 4: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 3: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x4) 10:34:40 executing program 2: syz_io_uring_setup(0x3e19, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000140), 0x0) 10:34:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x4) 10:34:40 executing program 4: syz_io_uring_setup(0x3e19, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000140), 0x0) 10:34:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000)=0xfffffffe, 0x4) 10:34:40 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x10) 10:34:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 10:34:40 executing program 3: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000)=0xfffffffe, 0x4) 10:34:40 executing program 4: syz_io_uring_setup(0x3e19, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000140), 0x0) 10:34:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x4) 10:34:40 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x10) 10:34:40 executing program 3: socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0x0, 0x0) 10:34:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000)=0xfffffffe, 0x4) 10:34:40 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x10) 10:34:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x4) 10:34:40 executing program 4: syz_io_uring_setup(0x3e19, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000140), 0x0) 10:34:40 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x10) 10:34:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 10:34:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 10:34:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000)=0xfffffffe, 0x4) 10:34:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 10:34:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x101, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) 10:34:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x2001001000000000}}, 0x1c, 0x0}}], 0x1, 0x0) 10:34:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 10:34:41 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2, 0x7}]}]}}, &(0x7f0000000140)=""/149, 0x32, 0x95, 0x8}, 0x20) 10:34:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 10:34:41 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2, 0x7}]}]}}, &(0x7f0000000140)=""/149, 0x32, 0x95, 0x8}, 0x20) 10:34:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 10:34:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x101, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) [ 133.726463][ T9270] BPF: (anon) type_id=2 bits_offset=7 [ 133.737131][ T9273] BPF: (anon) type_id=2 bits_offset=7 [ 133.752492][ T9270] BPF: [ 133.760103][ T9270] BPF:Invalid member bits_offset [ 133.766584][ T9270] BPF: [ 133.766584][ T9270] 10:34:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 10:34:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x2001001000000000}}, 0x1c, 0x0}}], 0x1, 0x0) [ 133.782095][ T9273] BPF: [ 133.790392][ T9273] BPF:Invalid member bits_offset [ 133.809687][ T9273] BPF: [ 133.809687][ T9273] [ 133.827816][ T9281] BPF: (anon) type_id=2 bits_offset=7 [ 133.847052][ T9281] BPF: [ 133.868753][ T9281] BPF:Invalid member bits_offset 10:34:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x2001001000000000}}, 0x1c, 0x0}}], 0x1, 0x0) 10:34:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 10:34:41 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2, 0x7}]}]}}, &(0x7f0000000140)=""/149, 0x32, 0x95, 0x8}, 0x20) 10:34:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x101, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) [ 133.880601][ T9281] BPF: [ 133.880601][ T9281] 10:34:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x101, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) 10:34:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 10:34:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 10:34:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x2001001000000000}}, 0x1c, 0x0}}], 0x1, 0x0) [ 133.964749][ T9295] BPF: (anon) type_id=2 bits_offset=7 [ 133.989906][ T9295] BPF: [ 133.998848][ T9295] BPF:Invalid member bits_offset 10:34:41 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2, 0x7}]}]}}, &(0x7f0000000140)=""/149, 0x32, 0x95, 0x8}, 0x20) [ 134.041106][ T9295] BPF: [ 134.041106][ T9295] 10:34:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 10:34:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:41 executing program 2: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) [ 134.101565][ T9308] BPF: (anon) type_id=2 bits_offset=7 [ 134.138285][ T9308] BPF: 10:34:41 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) 10:34:41 executing program 5: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) [ 134.147583][ T9308] BPF:Invalid member bits_offset [ 134.167482][ T9308] BPF: [ 134.167482][ T9308] [ 134.170040][ T9315] x86/PAT: syz-executor.1:9315 map pfn RAM range req write-combining for [mem 0x9498d000-0x9498dfff], got write-back 10:34:41 executing program 2: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 10:34:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:41 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) 10:34:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 134.253839][ T9328] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 10:34:41 executing program 2: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 10:34:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 134.345732][ T9337] x86/PAT: syz-executor.1:9337 map pfn RAM range req write-combining for [mem 0x94513000-0x94513fff], got write-back 10:34:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:42 executing program 5: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 10:34:42 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) 10:34:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 10:34:42 executing program 2: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 10:34:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:42 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) [ 134.666540][ T9360] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 134.672220][ T9364] x86/PAT: syz-executor.1:9364 map pfn RAM range req write-combining for [mem 0x97f6b000-0x97f6bfff], got write-back 10:34:42 executing program 5: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 10:34:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 134.783599][ T9373] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 10:34:42 executing program 0: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) [ 134.878576][ T9379] x86/PAT: syz-executor.1:9379 map pfn RAM range req write-combining for [mem 0x88b7e000-0x88b7efff], got write-back [ 134.889155][ T9382] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 10:34:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:42 executing program 5: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 10:34:42 executing program 1: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 10:34:42 executing program 0: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) [ 135.108168][ T9391] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 135.109235][ T9390] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 135.119640][ T9392] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 10:34:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:42 executing program 1: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 10:34:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 10:34:42 executing program 0: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) [ 135.244025][ T9403] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 135.274021][ T9407] x86/PAT: syz-executor.5:9407 map pfn RAM range req write-combining for [mem 0x9efaa000-0x9efaafff], got write-back 10:34:42 executing program 1: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) [ 135.303812][ T9408] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 10:34:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) [ 135.396461][ T9411] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 135.452155][ T9419] x86/PAT: syz-executor.5:9419 map pfn RAM range req write-combining for [mem 0x93ef6000-0x93ef6fff], got write-back 10:34:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$fb(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 10:34:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 135.693530][ T9429] x86/PAT: syz-executor.5:9429 map pfn RAM range req write-combining for [mem 0xa1547000-0xa1547fff], got write-back 10:34:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:43 executing program 5: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 10:34:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 10:34:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x65b7, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:34:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x91, &(0x7f0000000280)=""/145, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:43 executing program 5: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 10:34:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x91, &(0x7f0000000280)=""/145, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@multicast1, {@in=@multicast1, @in=@multicast2}, {{@in=@loopback, @in6=@mcast2}}}, [@mark={0xc}]}, 0x134}}, 0x0) 10:34:43 executing program 5: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 10:34:43 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x31]}}}}]}) 10:34:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 10:34:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@multicast1, {@in=@multicast1, @in=@multicast2}, {{@in=@loopback, @in6=@mcast2}}}, [@mark={0xc}]}, 0x134}}, 0x0) 10:34:43 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x31]}}}}]}) 10:34:43 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @random="0000000028ae", @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x2}, {0x0, 0x7, "81a28db0da"}]}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4425a4b1f131771f8d1224a9625b765bbf298c629250c3ba", "ad978d6e26ab45443ebe576a762ab3d92cf96258a91a678ab4104c5e5aed9116"}}}}}}, 0x0) 10:34:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x541b, 0x0) 10:34:43 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x31]}}}}]}) 10:34:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x91, &(0x7f0000000280)=""/145, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@multicast1, {@in=@multicast1, @in=@multicast2}, {{@in=@loopback, @in6=@mcast2}}}, [@mark={0xc}]}, 0x134}}, 0x0) 10:34:43 executing program 4: unshare(0x6c060000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000001540)="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", 0x241, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x4002) 10:34:43 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @random="0000000028ae", @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x2}, {0x0, 0x7, "81a28db0da"}]}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4425a4b1f131771f8d1224a9625b765bbf298c629250c3ba", "ad978d6e26ab45443ebe576a762ab3d92cf96258a91a678ab4104c5e5aed9116"}}}}}}, 0x0) 10:34:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x541b, 0x0) 10:34:43 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x31]}}}}]}) 10:34:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@multicast1, {@in=@multicast1, @in=@multicast2}, {{@in=@loopback, @in6=@mcast2}}}, [@mark={0xc}]}, 0x134}}, 0x0) 10:34:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x91, &(0x7f0000000280)=""/145, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:34:43 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @random="0000000028ae", @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x2}, {0x0, 0x7, "81a28db0da"}]}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4425a4b1f131771f8d1224a9625b765bbf298c629250c3ba", "ad978d6e26ab45443ebe576a762ab3d92cf96258a91a678ab4104c5e5aed9116"}}}}}}, 0x0) [ 136.421498][ T9491] IPVS: ftp: loaded support on port[0] = 21 10:34:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x541b, 0x0) 10:34:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x88, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x9}, {0x8, 0x2, @multicast2}}}]}]}, 0x88}}, 0x0) 10:34:44 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102393, &(0x7f0000000000)=0x18ff9) 10:34:44 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @random="0000000028ae", @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x2}, {0x0, 0x7, "81a28db0da"}]}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4425a4b1f131771f8d1224a9625b765bbf298c629250c3ba", "ad978d6e26ab45443ebe576a762ab3d92cf96258a91a678ab4104c5e5aed9116"}}}}}}, 0x0) 10:34:44 executing program 2: semget$private(0x0, 0x3, 0x45b) r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semget$private(0x0, 0x4, 0x0) futex(&(0x7f0000000140)=0x2, 0x9, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)=0x2, 0x1) [ 136.569552][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.625099][ T9516] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 10:34:44 executing program 4: unshare(0x6c060000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000001540)="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", 0x241, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x4002) 10:34:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x541b, 0x0) 10:34:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:34:44 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102393, &(0x7f0000000000)=0x18ff9) 10:34:44 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 136.672100][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.691913][ T21] tipc: TX() has been purged, node left! 10:34:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x88, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x9}, {0x8, 0x2, @multicast2}}}]}]}, 0x88}}, 0x0) 10:34:44 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x301, 0x0, 0x0, {{0x5}, {@val