[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. 2020/10/16 11:27:06 fuzzer started 2020/10/16 11:27:07 dialing manager at 10.128.0.105:40317 2020/10/16 11:27:07 syscalls: 3308 2020/10/16 11:27:07 code coverage: enabled 2020/10/16 11:27:07 comparison tracing: enabled 2020/10/16 11:27:07 extra coverage: extra coverage is not supported by the kernel 2020/10/16 11:27:07 setuid sandbox: enabled 2020/10/16 11:27:07 namespace sandbox: enabled 2020/10/16 11:27:07 Android sandbox: enabled 2020/10/16 11:27:07 fault injection: enabled 2020/10/16 11:27:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/16 11:27:07 net packet injection: enabled 2020/10/16 11:27:07 net device setup: enabled 2020/10/16 11:27:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/16 11:27:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/16 11:27:07 USB emulation: /dev/raw-gadget does not exist 2020/10/16 11:27:07 hci packet injection: enabled 2020/10/16 11:27:07 wifi device emulation: enabled 11:28:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x3f, 0x7}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x3a8) syzkaller login: [ 141.265459] audit: type=1400 audit(1602847728.163:8): avc: denied { execmem } for pid=6489 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:28:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x10}) 11:28:48 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, 0x0) 11:28:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0300c170", 0x4) 11:28:48 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 11:28:49 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff}}}, 0x24}, 0x1, 0x1400}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 142.460990] IPVS: ftp: loaded support on port[0] = 21 [ 142.652541] chnl_net:caif_netlink_parms(): no params data found [ 142.653078] IPVS: ftp: loaded support on port[0] = 21 [ 142.771651] IPVS: ftp: loaded support on port[0] = 21 [ 142.863769] chnl_net:caif_netlink_parms(): no params data found [ 142.990671] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.998204] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.006339] device bridge_slave_0 entered promiscuous mode [ 143.016622] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.023003] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.031645] device bridge_slave_1 entered promiscuous mode [ 143.067985] IPVS: ftp: loaded support on port[0] = 21 [ 143.098435] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.145422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.160395] IPVS: ftp: loaded support on port[0] = 21 [ 143.198504] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.207758] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.217851] device bridge_slave_0 entered promiscuous mode [ 143.317643] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.326273] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.333259] device bridge_slave_1 entered promiscuous mode [ 143.358427] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.366098] team0: Port device team_slave_0 added [ 143.372272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.382507] team0: Port device team_slave_1 added [ 143.412168] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.441161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.447982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.473841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.489527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.495933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.521417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.534162] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.540069] IPVS: ftp: loaded support on port[0] = 21 [ 143.541832] chnl_net:caif_netlink_parms(): no params data found [ 143.568250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.601108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.649884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.658441] team0: Port device team_slave_0 added [ 143.703438] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.711102] team0: Port device team_slave_1 added [ 143.732877] device hsr_slave_0 entered promiscuous mode [ 143.741496] device hsr_slave_1 entered promiscuous mode [ 143.805322] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.823105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.830951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.858041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.870776] chnl_net:caif_netlink_parms(): no params data found [ 143.897751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.907283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.914525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.940484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.955932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.976717] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.983077] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.991900] device bridge_slave_0 entered promiscuous mode [ 144.006985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.032481] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.039228] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.050831] device bridge_slave_1 entered promiscuous mode [ 144.080614] device hsr_slave_0 entered promiscuous mode [ 144.087487] device hsr_slave_1 entered promiscuous mode [ 144.146113] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.191252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.200371] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.224395] chnl_net:caif_netlink_parms(): no params data found [ 144.250968] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.385879] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.397350] team0: Port device team_slave_0 added [ 144.429385] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.436050] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.445215] device bridge_slave_0 entered promiscuous mode [ 144.451991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.459556] team0: Port device team_slave_1 added [ 144.468865] chnl_net:caif_netlink_parms(): no params data found [ 144.492296] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.493807] Bluetooth: hci0: command 0x0409 tx timeout [ 144.499912] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.512611] device bridge_slave_1 entered promiscuous mode [ 144.586317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.600709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.608004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.633455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.649509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.653710] Bluetooth: hci1: command 0x0409 tx timeout [ 144.655868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.686266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.708843] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.735117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.780036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.811178] Bluetooth: hci2: command 0x0409 tx timeout [ 144.820015] device hsr_slave_0 entered promiscuous mode [ 144.827733] device hsr_slave_1 entered promiscuous mode [ 144.835287] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.841631] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.849562] device bridge_slave_0 entered promiscuous mode [ 144.877199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.884517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.891892] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.912513] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.919487] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.928273] device bridge_slave_1 entered promiscuous mode [ 144.935735] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.946674] team0: Port device team_slave_0 added [ 144.952748] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.962360] team0: Port device team_slave_1 added [ 144.967549] Bluetooth: hci3: command 0x0409 tx timeout [ 145.026269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.032585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.058582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.074869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.081125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.107442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.119320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.126751] Bluetooth: hci4: command 0x0409 tx timeout [ 145.144142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.160130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.177548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.196505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.256163] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.265025] team0: Port device team_slave_0 added [ 145.283590] Bluetooth: hci5: command 0x0409 tx timeout [ 145.290120] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.297671] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.306609] device bridge_slave_0 entered promiscuous mode [ 145.317006] device hsr_slave_0 entered promiscuous mode [ 145.327434] device hsr_slave_1 entered promiscuous mode [ 145.333378] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.341211] team0: Port device team_slave_1 added [ 145.371625] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.378518] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.386395] device bridge_slave_1 entered promiscuous mode [ 145.392944] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.401829] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.424538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.430792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.456065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.497766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.504804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.531450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.546196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.588486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.600153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.610068] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.653678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.661359] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.678060] device hsr_slave_0 entered promiscuous mode [ 145.686264] device hsr_slave_1 entered promiscuous mode [ 145.693353] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.700865] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.712145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.741085] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.756062] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.776580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.785945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.793787] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.801036] team0: Port device team_slave_0 added [ 145.807619] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.815421] team0: Port device team_slave_1 added [ 145.831421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.878911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.885607] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.892913] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.921577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.928029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.953630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.972244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.979778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.001925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.008711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.034689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.046317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.055988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.066725] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.072794] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.088718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.096582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.107787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.116078] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.122506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.129929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.140443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.150202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.175065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.183179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.198574] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.205664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.213599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.221406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.229412] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.235844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.246207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.255340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.281148] device hsr_slave_0 entered promiscuous mode [ 146.287486] device hsr_slave_1 entered promiscuous mode [ 146.293349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.302204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.310814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.318851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.327134] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.333581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.344222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.359182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.366432] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.380253] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.388076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.397914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.410155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.418454] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.435990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.445704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.455459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.463160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.472066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.494746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.522554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.530986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.551545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.562720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.570308] Bluetooth: hci0: command 0x041b tx timeout [ 146.578122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.589002] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.599618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.609076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.617926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.626329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.634807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.642383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.652047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.666961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.676011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.696107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.704452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.712014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.720285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.734241] Bluetooth: hci1: command 0x041b tx timeout [ 146.736528] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.746011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.756542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.787958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.795631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.836959] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.843000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.883904] Bluetooth: hci2: command 0x041b tx timeout [ 146.908126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.917365] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.928790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.938292] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.949165] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.958300] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.970891] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.981196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.988450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.995315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.001999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.011431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.026889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.042200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.048656] Bluetooth: hci3: command 0x041b tx timeout [ 147.058874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.069456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.076511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.085392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.099474] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.109566] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.115693] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.125869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.138638] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.144987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.151938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.167505] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.173797] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.184702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.197120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.204841] Bluetooth: hci4: command 0x041b tx timeout [ 147.215596] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.226704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.235393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.242931] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.249338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.256823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.265028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.272614] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.279013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.287175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.294421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.301850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.310596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.320559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.335814] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.341895] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.350249] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.359438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.367785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.373867] Bluetooth: hci5: command 0x041b tx timeout [ 147.375870] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.386734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.395980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.404031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.415385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.429243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.441197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.449593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.461217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.470342] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.476732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.484646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.493901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.502686] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.511203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.522040] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 147.531538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.547159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.555131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.562958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.570862] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.577256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.585028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.592808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.600833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.609464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.617693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.626200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.634144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.648283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.659284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.670357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.691524] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 147.705771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.714447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.722205] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.728656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.737980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.746502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.755136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.762841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.771223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.779547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.790123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.800050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.811754] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 147.820026] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 147.826925] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 147.845756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.856101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.864645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.872348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.887740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.907566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.919466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.929023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.937739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.950677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.958890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.966986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.977102] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 147.987873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.999166] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.006555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.018804] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 148.026580] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 148.033323] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 148.041337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.050400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.058382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.066188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.074750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.086089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.095632] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.109336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.118804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.126968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.135015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.142628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.156654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.163445] device veth0_vlan entered promiscuous mode [ 148.172300] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 148.189483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.196653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.205164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.212552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.220857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.228865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.237544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.249114] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.256771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.276061] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 148.285429] device veth0_vlan entered promiscuous mode [ 148.302969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.319203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.328421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.336532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.343407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.352855] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 148.366597] device veth1_vlan entered promiscuous mode [ 148.372816] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 148.382176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.390185] device veth1_vlan entered promiscuous mode [ 148.396452] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 148.405039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.412402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.421778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.428985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.436489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.445322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.460017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.471020] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.477653] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.489117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.501077] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 148.522079] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 148.531326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.540193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.552712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.561973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.569990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.577995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.585981] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.592318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.599800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.608903] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.615531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.631582] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.645235] Bluetooth: hci0: command 0x040f tx timeout [ 148.647377] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 148.661803] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 148.675386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.693300] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 148.704180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.711688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.721252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.729854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.738132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.745952] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.752319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.765593] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 148.773250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.785820] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 148.797206] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 148.807650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.813929] Bluetooth: hci1: command 0x040f tx timeout [ 148.821612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.828795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.836655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.845042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.854784] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 148.863398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.878805] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.892571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.903063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.910015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.923871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.933099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.945951] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 148.955715] device veth0_macvtap entered promiscuous mode [ 148.962305] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 148.971893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.978161] Bluetooth: hci2: command 0x040f tx timeout [ 148.989318] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 148.997260] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.004700] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.010864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.019437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.027510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.035567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.043173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.057488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.068811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.082788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.090540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.099633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.108093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.116572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.126991] device veth0_macvtap entered promiscuous mode [ 149.133139] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 149.140629] device veth1_macvtap entered promiscuous mode [ 149.149610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.151956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.152920] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.152969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.158631] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 149.161185] device veth0_vlan entered promiscuous mode [ 149.169416] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.171776] Bluetooth: hci3: command 0x040f tx timeout [ 149.195556] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.228694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 149.239166] device veth1_macvtap entered promiscuous mode [ 149.247333] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 149.258090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 149.266309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.275281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.282379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.284604] Bluetooth: hci4: command 0x040f tx timeout [ 149.292028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.303617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.311043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.323897] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.331556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.338829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.346005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.354238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.369897] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.381089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 149.391386] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.415741] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.427871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 149.443074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.503738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.512500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.522131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.530464] Bluetooth: hci5: command 0x040f tx timeout [ 149.542394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.552947] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 149.560391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.567752] device veth1_vlan entered promiscuous mode [ 149.574926] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 149.583254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.594529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.606580] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 149.614198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.621585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.630542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.640214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.648919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.657971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.670019] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 149.678281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.697072] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 149.708512] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 149.717154] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.724471] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.732137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.741534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.750223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.768280] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.776240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.786415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.797246] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 149.804223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.818438] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 149.830116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.839129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.848472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.856969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.871311] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 149.885849] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 149.892910] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.902025] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.914924] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.929357] device veth0_vlan entered promiscuous mode [ 149.937169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.951802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.959605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.968292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.980115] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 149.991276] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.002059] device veth0_vlan entered promiscuous mode [ 150.011610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.024159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.031987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.046968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.060152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.067452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.079130] device veth1_vlan entered promiscuous mode [ 150.101312] device veth0_macvtap entered promiscuous mode [ 150.110016] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.139455] device veth1_vlan entered promiscuous mode [ 150.147167] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.167622] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.184334] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.191215] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.205065] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.214864] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 150.234218] device veth1_macvtap entered promiscuous mode [ 150.240686] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 150.249524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.258194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.266280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.274648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.281799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.290833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.299755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.307498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.323199] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.347453] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.356742] device veth0_vlan entered promiscuous mode [ 150.369339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.386730] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 150.397345] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 150.412068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.421027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.429690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.437842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.449421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 150.458028] device veth1_vlan entered promiscuous mode [ 150.465956] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.477573] device veth0_macvtap entered promiscuous mode [ 150.485427] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.506701] device veth0_macvtap entered promiscuous mode [ 150.513297] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.523312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.541800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.555742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.567600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.578251] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 150.586394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.603743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.614867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.624634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.634696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.645754] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 150.652614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.662372] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 150.669389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.683843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.691375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.706326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.715233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.723022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.731822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.734140] Bluetooth: hci0: command 0x0419 tx timeout [ 150.740332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.762153] device veth1_macvtap entered promiscuous mode [ 150.769238] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 150.776318] device veth1_macvtap entered promiscuous mode [ 150.782591] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 150.805580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.826048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 150.877679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.894378] Bluetooth: hci1: command 0x0419 tx timeout [ 150.900513] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.915727] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.923007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.938156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.948867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.958508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.969496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.979098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.989344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.000033] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.007654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.017679] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 151.029500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.044207] Bluetooth: hci2: command 0x0419 tx timeout [ 151.044664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.065332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.075515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.086974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.097580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.109201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.118805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.129448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.140018] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.147458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.155189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.171263] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.178366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.190809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.200709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.213905] Bluetooth: hci3: command 0x0419 tx timeout [ 151.216173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.227398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.236210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.275525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.286472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.304266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.314919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.325867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.336705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.346544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.356765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.363840] Bluetooth: hci4: command 0x0419 tx timeout [ 151.369030] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.378652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.386362] device veth0_macvtap entered promiscuous mode [ 151.392982] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.428557] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 151.439300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.448683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.463688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.474219] device veth1_macvtap entered promiscuous mode [ 151.480732] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 151.496945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.497525] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 151.509688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.512293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.535372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.549079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.558928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.571932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.582899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.593015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.604199] Bluetooth: hci5: command 0x0419 tx timeout [ 151.609523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.619851] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.627101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.637058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.652094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.660414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.667931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.676648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.686204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.701010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.747638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.768990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.785958] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 151.805511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.827592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:28:58 executing program 0: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 151.858647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.889507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.899163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:28:58 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000000)="ba67aa65b5dcf995abd675d37037d438d9b8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 151.909163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.926452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.939678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.950767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.962387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.974329] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.981397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.000409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.012926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.021040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.035916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.053974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:28:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0xd, @local}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) [ 152.138130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.160683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.188640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.209450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.219983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 11:28:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @local}}}, 0x48) [ 152.230367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.240915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.251560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.271316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.282687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.295085] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.302326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.316361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 11:28:59 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_names\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0xa00, 0x0) [ 152.335935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:28:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgsnd(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="ce"], 0x1, 0x0) msgrcv(r2, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) 11:28:59 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x200006e0, 0x0, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4ba3a94a2d2393e3182f64694d7d05fb478c8f56627a5cf905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8"}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b5) [ 152.536267] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 152.542673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.563178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:28:59 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[{0x10}, {0x10, 0x110, 0xa}], 0x20}}], 0x2, 0x0) [ 152.620589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.658113] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 152.689359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.703863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.755549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.775990] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 152.814279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.860779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.926383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.947553] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 152.979702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.996966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.032110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.047504] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.056027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.063166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:29:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x258000) 11:29:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0xf0, 0x10, 0x501, 0x0, 0x0, {{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {@in6=@dev}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) [ 153.128507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.159587] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.182680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.189000] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.200730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.288501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.299534] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.338668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.349154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.391294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.414947] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.429703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.451282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.474297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:29:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x24, r5, 0xf, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x0) 11:29:01 executing program 5: unshare(0x600) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x76000b}, 0x200000, 0x4}) 11:29:01 executing program 1: unshare(0x20000400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0, 0xfffffc80}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x38}, {0x0}], 0x8, 0x0) 11:29:01 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 11:29:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x84, 0x76, &(0x7f0000000000)={@loopback=0x2000000, @empty}, 0x8) 11:29:01 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xffffffff}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 11:29:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) 11:29:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x9}) 11:29:01 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) [ 154.456344] IPVS: ftp: loaded support on port[0] = 21 11:29:01 executing program 4: r0 = memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x560) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) sendto$inet(r3, &(0x7f0000000000)='1', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) 11:29:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(r0, &(0x7f0000000100), 0x2d) semtimedop(r0, &(0x7f0000000040), 0x1b9, 0x0) semop(r0, &(0x7f0000000040)=[{0x6}, {0x0, 0x1}], 0x2) 11:29:01 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000440)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000280)="c0", 0x1}], 0x1}}, {{&(0x7f00000009c0)={0xa, 0x0, @dev}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)='\x00', 0x1}], 0x31}}], 0x2, 0x0) 11:29:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) clone(0x3a3dd4008420af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 11:29:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="6902000039000535d25a80648c63940d0524fc601044e10096226b9305848b59c402400a000000051a82c137153e", 0x2e}, {&(0x7f00000008c0)="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", 0x1e4}, {&(0x7f0000000440)="da223b638c3e05238ffe1a7d3b5edb41966322e32fd402aa6b6c302640d9ebf1b51465", 0x23}, {&(0x7f00000006c0)="407899b5131bd2ebadc6ffc8804565fe7000a027136cede7b8cd370714a254230d5f8017fa0a7d76a2239a2d6e669c4110c55bf0", 0x34}], 0x4}, 0x0) 11:29:01 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r4 = dup(r3) write$UHID_DESTROY(r4, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)) dup2(r4, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) [ 154.734362] NFS: bad mount option value specified: veth0_virt_wifi [ 154.770133] NFS: bad mount option value specified: veth0_virt_wifi 11:29:01 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 11:29:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x1c}}, 0x0) 11:29:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_flags}) 11:29:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x3}) [ 154.890427] IPVS: ftp: loaded support on port[0] = 21 11:29:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8001) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 11:29:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000140019", 0x7}], 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffea3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x200000000e22e, 0x0) [ 154.961188] IPVS: ftp: loaded support on port[0] = 21 11:29:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) [ 155.095910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.141527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.175917] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.4'. 11:29:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x9, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:29:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r2, @ANYBLOB="9f8c23cf00000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}]}, 0x38}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 11:29:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0xfec0ffff00000000}, 0x401}, 0x1c, 0x0}}], 0x1, 0x0) 11:29:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0xb01}, 0x14}}, 0x0) [ 155.588691] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 155.605062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.631467] PF_BRIDGE: br_mdb_parse() with non-bridge [ 155.652716] PF_BRIDGE: br_mdb_parse() with non-bridge 11:29:02 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0xfffffdb6) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r4 = dup(r3) write$UHID_DESTROY(r4, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)) dup2(r4, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 11:29:02 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socket$kcm(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=r1, 0x279) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 11:29:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000180), 0x492492492492642, 0x0) [ 155.690836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:29:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0, 0x568, 0x508}}], 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="91b7000000000000002005"], 0x14}}, 0x0) [ 155.751977] PF_BRIDGE: br_mdb_parse() with non-bridge [ 155.758621] PF_BRIDGE: br_mdb_parse() with non-bridge 11:29:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{0x2}, {}]}, @NHA_GROUP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x38}}, 0x0) 11:29:02 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56bdd435e5dcf6f309566f3a", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000002c00270e00"/20, @ANYRES32=r5, @ANYBLOB="0007000000000000f1ff02000a0001006261736963000001040002"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 155.802712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.861451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:29:02 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)="01", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={'crct10dif\x00'}}) [ 155.901797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=104 sclass=netlink_route_socket pid=8246 comm=syz-executor.2 [ 155.901946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000180), 0x492492492492642, 0x0) [ 155.982099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:02 executing program 2: unshare(0x40600) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, 0x0) 11:29:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000d00)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0xc}) [ 156.037058] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:29:03 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x20) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 11:29:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000180), 0x492492492492642, 0x0) [ 156.187615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:29:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000180)="c4c691019919da078a0098d1e0c393b040f762910000000000000022"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 11:29:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xae60, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae6a, &(0x7f0000000040)={0x0, 0x2}) 11:29:03 executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0xfffffffffffffd57, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x40}, {0x6}]}, 0x10) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 11:29:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000010000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120100020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10020, 0x0) 11:29:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000180), 0x492492492492642, 0x0) 11:29:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8001) lseek(r2, 0x0, 0x3) [ 156.684759] VFS: Warning: syz-executor.1 using old stat() call. Recompile your binary. [ 156.706484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:29:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x1, &(0x7f0000003b40)=[{}], 0x0) 11:29:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0x0, 0x2, 0x0, @sint}]}) [ 156.725618] audit: type=1800 audit(1602847743.623:9): pid=8306 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15787 res=0 11:29:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400210100000000000000000a010200", @ANYRES32=r4, @ANYBLOB="140002000000000000000000000000000000000114000600000000800dfdffff"], 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11:29:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1802}, 0x1c) [ 156.848128] audit: type=1804 audit(1602847743.683:10): pid=8313 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir110227116/syzkaller.O0bx13/9/file0/bus" dev="sda1" ino=15787 res=1 11:29:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, 0x2}, 0x90) 11:29:03 executing program 4: unshare(0x2040400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x5, &(0x7f0000000180)={@pptp={0x18, 0x2, {0x0, @broadcast}}, {0x0}, 0x0}, 0xa0) 11:29:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x11, 0x148, 0x130, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x48}}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'vlan0\x00', 'dummy0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) [ 156.997213] audit: type=1804 audit(1602847743.723:11): pid=8315 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir110227116/syzkaller.O0bx13/9/file0/bus" dev="sda1" ino=15787 res=1 11:29:03 executing program 3: setrlimit(0x7, &(0x7f0000000080)) mq_open(&(0x7f0000000040)='em0self]&uservboxnet0\x00', 0x0, 0x0, 0x0) [ 157.120396] audit: type=1800 audit(1602847743.773:12): pid=8313 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15784 res=0 [ 157.157616] audit: type=1804 audit(1602847743.833:13): pid=8306 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir110227116/syzkaller.O0bx13/9/file0/file0/bus" dev="sda1" ino=15784 res=1 [ 157.192058] audit: type=1804 audit(1602847743.833:14): pid=8315 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir110227116/syzkaller.O0bx13/9/file0/file0/bus" dev="sda1" ino=15784 res=1 11:29:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:04 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/arp\x00') signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) unshare(0x24020400) pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000440)={0x1ff}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:29:04 executing program 0: userfaultfd(0x0) 11:29:04 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 11:29:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 11:29:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000640)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x26, 0x33, @assoc_req={@with_ht={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}}, 0x0, 0x0, {}, @void, @void}}]}, 0x50}}, 0x0) [ 157.437867] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 157.458893] ================================================================================ [ 157.467603] UBSAN: Undefined behaviour in net/sched/sch_api.c:375:22 [ 157.474105] shift exponent 47 is too large for 32-bit type 'int' [ 157.480608] CPU: 0 PID: 8364 Comm: syz-executor.2 Not tainted 4.19.150-syzkaller #0 [ 157.488430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.497793] Call Trace: [ 157.500391] dump_stack+0x22c/0x33e [ 157.504070] ubsan_epilogue+0xe/0x3a [ 157.507807] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 157.513970] ? qdisc_get_rtab+0x1d4/0x770 [ 157.518126] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 157.523339] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 157.528194] qdisc_get_rtab.cold+0x1d/0x8e [ 157.532562] tbf_change+0x978/0x1230 [ 157.536313] ? mark_held_locks+0xa6/0xf0 [ 157.540394] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 157.545521] ? tbf_enqueue+0x9b0/0x9b0 [ 157.549431] ? find_held_lock+0x2d/0x110 [ 157.553522] ? tbf_init+0x5e/0xc4 [ 157.557016] ? kvm_clock_get_cycles+0x14/0x30 [ 157.561520] ? ktime_get+0x21b/0x320 [ 157.565244] ? tbf_change+0x1230/0x1230 [ 157.569241] tbf_init+0x91/0xc4 [ 157.572535] qdisc_create+0x534/0x1080 [ 157.576436] ? tc_get_qdisc+0xad0/0xad0 [ 157.580422] ? nla_parse+0x1b2/0x290 [ 157.584149] tc_modify_qdisc+0x4c0/0x195b [ 157.588339] ? qdisc_create+0x1080/0x1080 [ 157.592494] ? rtnetlink_rcv_msg+0x443/0xc10 [ 157.596957] ? qdisc_create+0x1080/0x1080 [ 157.601115] rtnetlink_rcv_msg+0x498/0xc10 [ 157.605359] ? rtnl_get_link+0x270/0x270 [ 157.609428] ? memcpy+0x35/0x50 [ 157.612714] ? netdev_pick_tx+0x350/0x350 [ 157.616862] ? __copy_skb_header+0x414/0x500 [ 157.621268] ? kfree_skbmem+0x140/0x140 [ 157.625249] netlink_rcv_skb+0x160/0x440 [ 157.629327] ? rtnl_get_link+0x270/0x270 [ 157.633389] ? netlink_ack+0xae0/0xae0 [ 157.637898] netlink_unicast+0x4d5/0x690 [ 157.641959] ? netlink_sendskb+0x110/0x110 [ 157.646197] netlink_sendmsg+0x717/0xcc0 [ 157.650262] ? nlmsg_notify+0x1a0/0x1a0 [ 157.654232] ? __sock_recv_ts_and_drops+0x540/0x540 [ 157.659262] ? nlmsg_notify+0x1a0/0x1a0 [ 157.663233] sock_sendmsg+0xc7/0x130 [ 157.666945] ___sys_sendmsg+0x7bb/0x8f0 [ 157.672500] ? copy_msghdr_from_user+0x440/0x440 [ 157.677253] ? find_held_lock+0x2d/0x110 [ 157.681325] ? __fget+0x386/0x570 [ 157.684798] ? lock_downgrade+0x750/0x750 [ 157.688947] ? check_preemption_disabled+0x41/0x2b0 [ 157.693965] ? __fget+0x3ad/0x570 [ 157.697417] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 157.701645] ? lock_acquire+0x170/0x3f0 [ 157.705615] ? __might_fault+0xef/0x1d0 [ 157.709593] ? __fget_light+0x1d1/0x230 [ 157.713577] __x64_sys_sendmsg+0x132/0x220 [ 157.717812] ? __sys_sendmsg+0x1b0/0x1b0 [ 157.721880] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 157.727243] ? trace_hardirqs_off_caller+0x6e/0x210 [ 157.732257] ? do_syscall_64+0x21/0x670 [ 157.736232] do_syscall_64+0xf9/0x670 [ 157.740038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.745242] RIP: 0033:0x45de59 [ 157.748430] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.767328] RSP: 002b:00007f34f30cfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.775572] RAX: ffffffffffffffda RBX: 000000000002e600 RCX: 000000000045de59 11:29:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xb, 0x3, @empty}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) 11:29:04 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x541b, 0x0) [ 157.782838] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000006 [ 157.790371] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 157.797721] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 157.805001] R13: 00007ffda42849cf R14: 00007f34f30d09c0 R15: 000000000118bf2c [ 157.812290] ================================================================================ [ 157.857255] ================================================================================ [ 157.866010] UBSAN: Undefined behaviour in net/sched/sch_api.c:376:24 [ 157.872511] shift exponent 47 is too large for 32-bit type 'int' [ 157.878661] CPU: 1 PID: 8364 Comm: syz-executor.2 Not tainted 4.19.150-syzkaller #0 [ 157.886452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.895828] Call Trace: [ 157.898426] dump_stack+0x22c/0x33e [ 157.902076] ubsan_epilogue+0xe/0x3a [ 157.905842] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 157.912009] ? qdisc_get_rtab+0x1d4/0x770 [ 157.916163] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 157.921187] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 157.926039] qdisc_get_rtab.cold+0x7f/0x8e [ 157.930283] tbf_change+0x978/0x1230 [ 157.934014] ? mark_held_locks+0xa6/0xf0 [ 157.938095] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 157.943201] ? tbf_enqueue+0x9b0/0x9b0 [ 157.947084] ? find_held_lock+0x2d/0x110 [ 157.951143] ? tbf_init+0x5e/0xc4 [ 157.954616] ? kvm_clock_get_cycles+0x14/0x30 [ 157.959109] ? ktime_get+0x21b/0x320 [ 157.962822] ? tbf_change+0x1230/0x1230 [ 157.966798] tbf_init+0x91/0xc4 [ 157.970079] qdisc_create+0x534/0x1080 [ 157.973971] ? tc_get_qdisc+0xad0/0xad0 [ 157.977947] ? nla_parse+0x1b2/0x290 [ 157.981663] tc_modify_qdisc+0x4c0/0x195b [ 157.985820] ? qdisc_create+0x1080/0x1080 [ 157.989983] ? rtnetlink_rcv_msg+0x443/0xc10 [ 157.994412] ? qdisc_create+0x1080/0x1080 [ 157.998561] rtnetlink_rcv_msg+0x498/0xc10 [ 158.002809] ? rtnl_get_link+0x270/0x270 [ 158.006873] ? memcpy+0x35/0x50 [ 158.010156] ? netdev_pick_tx+0x350/0x350 [ 158.014302] ? __copy_skb_header+0x414/0x500 [ 158.018729] ? kfree_skbmem+0x140/0x140 [ 158.022734] netlink_rcv_skb+0x160/0x440 [ 158.026800] ? rtnl_get_link+0x270/0x270 [ 158.030866] ? netlink_ack+0xae0/0xae0 [ 158.034769] netlink_unicast+0x4d5/0x690 [ 158.038837] ? netlink_sendskb+0x110/0x110 [ 158.043080] netlink_sendmsg+0x717/0xcc0 [ 158.047168] ? nlmsg_notify+0x1a0/0x1a0 [ 158.051153] ? __sock_recv_ts_and_drops+0x540/0x540 [ 158.056192] ? nlmsg_notify+0x1a0/0x1a0 [ 158.060168] sock_sendmsg+0xc7/0x130 [ 158.063881] ___sys_sendmsg+0x7bb/0x8f0 [ 158.067856] ? copy_msghdr_from_user+0x440/0x440 [ 158.072611] ? find_held_lock+0x2d/0x110 [ 158.076671] ? __fget+0x386/0x570 [ 158.080125] ? lock_downgrade+0x750/0x750 [ 158.084275] ? check_preemption_disabled+0x41/0x2b0 [ 158.089296] ? __fget+0x3ad/0x570 [ 158.092753] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 158.096987] ? lock_acquire+0x170/0x3f0 [ 158.100960] ? __might_fault+0xef/0x1d0 [ 158.104941] ? __fget_light+0x1d1/0x230 [ 158.108923] __x64_sys_sendmsg+0x132/0x220 [ 158.113160] ? __sys_sendmsg+0x1b0/0x1b0 [ 158.117279] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 158.122663] ? trace_hardirqs_off_caller+0x6e/0x210 [ 158.127681] ? do_syscall_64+0x21/0x670 [ 158.131658] do_syscall_64+0xf9/0x670 [ 158.135497] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 158.140717] RIP: 0033:0x45de59 [ 158.143913] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 158.162905] RSP: 002b:00007f34f30cfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.170617] RAX: ffffffffffffffda RBX: 000000000002e600 RCX: 000000000045de59 [ 158.177891] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000006 [ 158.185158] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 158.192510] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 158.199779] R13: 00007ffda42849cf R14: 00007f34f30d09c0 R15: 000000000118bf2c 11:29:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') recvmmsg(r0, &(0x7f0000003980), 0x400000000000002, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="7db700e10000000006100b"], 0x14}}, 0x0) [ 158.207087] ================================================================================ [ 158.227718] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:05 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) socket$packet(0x11, 0x3, 0x300) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) 11:29:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r2, &(0x7f0000000040)) 11:29:05 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') [ 158.277741] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:05 executing program 5: unshare(0x600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x236000, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 11:29:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x57, &(0x7f0000000680)="f7f249b9740c0764ca04f400befbf2fc785f755a5d6377849afba0d2c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac008ea1566535d653384fe98bc927d06b00009038396bb68e4053cd0c42727a81"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 158.399060] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)) 11:29:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x1014, 0x4, 0x4e8, 0x0, 0x218, 0x108, 0x400, 0x400, 0x400, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@dev, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'geneve1\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x538) 11:29:05 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 11:29:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0xffffffffffffffa0, 0x0, &(0x7f0000000600)=[@reply_sg={0x630c, {0x0, 0x630c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1b, 0x0, 0x0}) [ 158.588618] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.601094] x_tables: unsorted underflow at hook 4 [ 158.627308] binder: 8415:8417 ioctl c0306201 20000740 returned -14 11:29:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 158.642119] x_tables: unsorted underflow at hook 4 [ 158.657497] binder: 8420:8423 ioctl c0306201 20000740 returned -14 11:29:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000200)={0x0, 0x0, 0x0}) sendfile(r1, r0, 0x0, 0x1c01) 11:29:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:06 executing program 3: r0 = socket(0x1e, 0x5, 0x0) unshare(0x400) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8906, 0x0) 11:29:06 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r1, r2) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() fcntl$setown(r2, 0x8, r3) tkill(r0, 0x16) 11:29:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 159.207956] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 159.221715] hrtimer: interrupt took 51788 ns 11:29:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406010400000000000000000b0000280500010007"], 0x34}}, 0x0) 11:29:08 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#! ./file0'], 0x191) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 11:29:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000200)={0x0, 0x0, 0x0}) sendfile(r1, r0, 0x0, 0x1c01) 11:29:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x70}}, 0x0) 11:29:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x15, 0x0, 0x0, 0x9}, {0x6}]}) [ 161.521085] nla_parse: 2 callbacks suppressed [ 161.521096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:29:08 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c9a8a3d217a6454fda1e5a2a2360c299a1c0c20c69057d39f6606f7678b50ed1", 0x20}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0) 11:29:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:08 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x245}, 0x10) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249265a, 0x0) 11:29:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) [ 161.604908] audit: type=1326 audit(1602847748.493:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8481 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 11:29:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:08 executing program 0: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x2c) openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) finit_module(0xffffffffffffffff, 0x0, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 11:29:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000001000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 11:29:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 161.937858] device ipvlan2 entered promiscuous mode 11:29:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000200)={0x0, 0x0, 0x0}) sendfile(r1, r0, 0x0, 0x1c01) 11:29:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) [ 162.397578] audit: type=1326 audit(1602847749.293:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8481 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 11:29:09 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10102, 0x0) 11:29:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 162.538363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:09 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)={{}, {0x0, 0xfe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x68) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 11:29:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) [ 162.623830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000200)={0x0, 0x0, 0x0}) sendfile(r1, r0, 0x0, 0x1c01) 11:29:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x781882, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f03000000450001070000001419002b000a00010005000000006e0000000000000000010400", 0x39}], 0x1) [ 162.692220] device ipvlan2 entered promiscuous mode [ 163.211705] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 163.224175] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:10 executing program 0: socket$kcm(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 11:29:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) sendfile(r1, r0, 0x0, 0x1c01) 11:29:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:10 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0xf00f4c8d318113c4, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8007a12, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') [ 163.300665] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 163.310593] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 11:29:10 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000340)="15", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = gettid() tkill(r2, 0x1000000000015) 11:29:10 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 11:29:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:10 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x1c01) 11:29:10 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}]}]}, 0x38}}, 0x0) 11:29:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1dd, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}}}, 0x1fc}}, 0x0) 11:29:10 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc02c5341, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 11:29:10 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c030100000019000b2200000001000022dc1338d54404009b84136ef75afb83de4411000500", 0x55}, {&(0x7f0000000140)="8270000000000100000097fa82", 0xd}], 0x2}, 0x0) 11:29:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:11 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x0, 0xffffffff}) write$binfmt_misc(r0, &(0x7f0000000300)={'syz1', "9c377abe4529b0aef96d76e52982932d9dc2971bb319c60a941322a7978fa7063609"}, 0x26) 11:29:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:11 executing program 5: syz_emit_ethernet(0x54, &(0x7f0000000180)={@multicast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1b410c", 0x1a, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @private0, [{}]}}}}}}, 0x0) 11:29:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x1c01) 11:29:11 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 11:29:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 164.556546] [U] SYZ17ZE)MV)-— [ 164.586491] [U] "6 [ 164.605230] [U] SYZ17ZE)MV)-— [ 164.633715] [U] "6 11:29:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:29:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:11 executing program 0: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 11:29:11 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xc31e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1a3) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRES32, @ANYRES64, @ANYBLOB="fbe60858d2385efa2f13bf0fefdc7e0ddc967b08b397d53fc213e65fc7b6e8eae08f03df3320e3321190f7c664178b2b16bbdd4c8985a3f05b81ba629cd2ffda50a5280abb12e090dcf09452f9d2b0b0ca81c82acb2a5be102c96d7d30b43614d29ef58646dd590f9fff4db3258632cb5df1eb2532410798e04a5eb954f97491e242a171a0456c373560fea06165deaf41357aa1a905de8a4116a74360de09b4c9948b36c0689b36f38e4690b1101f154ac0735faa3dde87c0d5d2557fb175ce575be2066b3ec396b4227ecd2f75d2f7627541d1302a187fbcb688854f03c87df7963d", @ANYRESDEC], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000001c0)={0x6, 0x0, 0x3, 0x6}) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x82432, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x6, 0x4}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x81) r3 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r4, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r4, 0x0, &(0x7f00000031c0)=""/246}, 0x20) 11:29:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 164.889441] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) sendfile(r1, r0, 0x0, 0x1c01) 11:29:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x61002, 0x0) pwritev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) 11:29:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) [ 165.018662] sd 0:0:1:0: [sg0] tag#1313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 165.027876] sd 0:0:1:0: [sg0] tag#1313 CDB: Test Unit Ready [ 165.033831] sd 0:0:1:0: [sg0] tag#1313 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.042851] sd 0:0:1:0: [sg0] tag#1313 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.043312] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.051864] sd 0:0:1:0: [sg0] tag#1313 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.051953] sd 0:0:1:0: [sg0] tag#1313 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052048] sd 0:0:1:0: [sg0] tag#1313 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052146] sd 0:0:1:0: [sg0] tag#1313 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052244] sd 0:0:1:0: [sg0] tag#1313 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052326] sd 0:0:1:0: [sg0] tag#1313 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052423] sd 0:0:1:0: [sg0] tag#1313 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052519] sd 0:0:1:0: [sg0] tag#1313 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052610] sd 0:0:1:0: [sg0] tag#1313 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052705] sd 0:0:1:0: [sg0] tag#1313 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.052806] sd 0:0:1:0: [sg0] tag#1313 CDB[c0]: 00 00 00 00 00 00 00 00 [ 165.074040] sd 0:0:1:0: [sg0] tag#1313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 165.166847] sd 0:0:1:0: [sg0] tag#1313 CDB: Test Unit Ready [ 165.172686] sd 0:0:1:0: [sg0] tag#1313 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.181621] sd 0:0:1:0: [sg0] tag#1313 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.191870] sd 0:0:1:0: [sg0] tag#1313 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.201058] sd 0:0:1:0: [sg0] tag#1313 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.210000] sd 0:0:1:0: [sg0] tag#1313 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.218938] sd 0:0:1:0: [sg0] tag#1313 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.227879] sd 0:0:1:0: [sg0] tag#1313 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.236820] sd 0:0:1:0: [sg0] tag#1313 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.245750] sd 0:0:1:0: [sg0] tag#1313 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.254701] sd 0:0:1:0: [sg0] tag#1313 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.263814] sd 0:0:1:0: [sg0] tag#1313 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.272694] sd 0:0:1:0: [sg0] tag#1313 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 165.281616] sd 0:0:1:0: [sg0] tag#1313 CDB[c0]: 00 00 00 00 00 00 00 00 11:29:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a80016004000014002000006d67f6f94007134cf6efb0f40a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000002000000a4683e4f6d0200003f5aeb4eff0100000000000000360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace810500d6e4edef3d93452a92307f27260e970358337446d6e7006742ea86fc4ee4f1ac588b", 0xd8}], 0x1}, 0x0) 11:29:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x61002, 0x0) pwritev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) 11:29:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) sendfile(r1, r0, 0x0, 0x1c01) 11:29:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:12 executing program 0: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001300)=[{&(0x7f0000000000)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, &(0x7f0000001200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x2}}, @prinfo={0x18}], 0x38}], 0x1, 0x0) 11:29:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:12 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800f3fc66000000000000000a080400f4ff0008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 165.470430] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.492479] IPv6: NLM_F_CREATE should be specified when creating new route 11:29:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x61002, 0x0) pwritev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) 11:29:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x6) sendfile(r1, r0, 0x0, 0x1c01) 11:29:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) [ 165.517421] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 165.540613] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.5'. 11:29:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) mkdir(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() gettid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r1, 0x0) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000100)='user}eth1\x00', 0x0) 11:29:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x61002, 0x0) pwritev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) [ 165.600686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.629397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:29:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x1c01) [ 165.671914] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:12 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800f3fc66000000000000000a080400f4ff0008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 11:29:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) 11:29:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:12 executing program 5: syz_emit_ethernet(0xb6, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x2}, @local, {[@rr={0x6, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000033e, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x3, "b7"}, @mss={0x2, 0x4}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0x5, 0xa, "cc75182e5bb785"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x7, "985f1dc2bf"}, @mptcp=@mp_join={0x1e, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) [ 165.821718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.861780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.897734] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) 11:29:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x80000) 11:29:12 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800f3fc66000000000000000a080400f4ff0008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 11:29:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400002, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x1c01) [ 166.062835] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) 11:29:13 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800f3fc66000000000000000a080400f4ff0008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 11:29:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) 11:29:13 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) fcntl$lock(r2, 0x5, &(0x7f0000000100)={0x1}) 11:29:13 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800f3fc66000000000000000a080400f4ff0008"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 11:29:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 166.293897] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 11:29:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x61002, 0x0) pwritev(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="1d", 0x20000281}], 0x2, 0x0, 0x0) 11:29:13 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2f, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x45c}}, 0x0) 11:29:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='3']}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r2, 0x2d, 0x0, 0x0, {0x24}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) 11:29:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/214, 0x8}], 0x9) [ 166.541563] sch_tbf: burst 0 is lower than device lo mtu (65550) !