[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2020/10/08 16:07:07 fuzzer started 2020/10/08 16:07:07 dialing manager at 10.128.0.26:38013 2020/10/08 16:07:07 syscalls: 3450 2020/10/08 16:07:07 code coverage: enabled 2020/10/08 16:07:07 comparison tracing: enabled 2020/10/08 16:07:07 extra coverage: enabled 2020/10/08 16:07:07 setuid sandbox: enabled 2020/10/08 16:07:07 namespace sandbox: enabled 2020/10/08 16:07:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/08 16:07:07 fault injection: enabled 2020/10/08 16:07:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/08 16:07:07 net packet injection: enabled 2020/10/08 16:07:07 net device setup: enabled 2020/10/08 16:07:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/08 16:07:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/08 16:07:07 USB emulation: enabled 2020/10/08 16:07:07 hci packet injection: enabled 2020/10/08 16:07:07 wifi device emulation: enabled 16:09:12 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x78) 16:09:12 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, 0x0) 16:09:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/22) 16:09:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000ad00)={0x58, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 16:09:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x73) sendmsg(0xffffffffffffffff, 0x0, 0x0) 16:09:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syzkaller login: [ 188.076487][ T6891] IPVS: ftp: loaded support on port[0] = 21 [ 188.230173][ T6893] IPVS: ftp: loaded support on port[0] = 21 [ 188.491212][ T6895] IPVS: ftp: loaded support on port[0] = 21 [ 188.567934][ T6891] chnl_net:caif_netlink_parms(): no params data found [ 188.631077][ T6893] chnl_net:caif_netlink_parms(): no params data found [ 188.813889][ T6897] IPVS: ftp: loaded support on port[0] = 21 [ 188.847248][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.854930][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.864005][ T6891] device bridge_slave_0 entered promiscuous mode [ 188.894135][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.903964][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.912333][ T6891] device bridge_slave_1 entered promiscuous mode [ 188.996038][ T6891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.011375][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.029508][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.053457][ T6893] device bridge_slave_0 entered promiscuous mode [ 189.084691][ T6891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.108903][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.116043][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.129085][ T6893] device bridge_slave_1 entered promiscuous mode [ 189.132566][ T6899] IPVS: ftp: loaded support on port[0] = 21 [ 189.227444][ T6891] team0: Port device team_slave_0 added [ 189.239128][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.254492][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.276250][ T6891] team0: Port device team_slave_1 added [ 189.303795][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 189.406678][ T6893] team0: Port device team_slave_0 added [ 189.427717][ T6893] team0: Port device team_slave_1 added [ 189.466134][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.488498][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.515221][ T6891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.561514][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.568661][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.596567][ T6891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.644827][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.655245][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.682025][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.696042][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.704529][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.730572][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.754174][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.761492][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.769721][ T6895] device bridge_slave_0 entered promiscuous mode [ 189.827134][ T6955] IPVS: ftp: loaded support on port[0] = 21 [ 189.833284][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.841240][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.849951][ T6895] device bridge_slave_1 entered promiscuous mode [ 189.895276][ T6893] device hsr_slave_0 entered promiscuous mode [ 189.903697][ T6893] device hsr_slave_1 entered promiscuous mode [ 189.930386][ T6891] device hsr_slave_0 entered promiscuous mode [ 189.938075][ T6891] device hsr_slave_1 entered promiscuous mode [ 189.946313][ T6891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.954917][ T6891] Cannot create hsr debugfs directory [ 189.972554][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.009542][ T17] Bluetooth: hci0: command 0x0409 tx timeout [ 190.018643][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.027953][ T6897] chnl_net:caif_netlink_parms(): no params data found [ 190.168128][ T6895] team0: Port device team_slave_0 added [ 190.195002][ T6895] team0: Port device team_slave_1 added [ 190.248448][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 190.364960][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.373021][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.402102][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.416235][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.424045][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.453003][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.487823][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 190.495044][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 190.567418][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.576629][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.586089][ T6897] device bridge_slave_0 entered promiscuous mode [ 190.651578][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.660102][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.667833][ T6897] device bridge_slave_1 entered promiscuous mode [ 190.712334][ T6895] device hsr_slave_0 entered promiscuous mode [ 190.720549][ T6895] device hsr_slave_1 entered promiscuous mode [ 190.727087][ T6895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.735066][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 190.741504][ T6895] Cannot create hsr debugfs directory [ 190.785256][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.797354][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 190.821104][ T6893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.835566][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.886087][ T6893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.932684][ T6893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.946917][ T6893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.968650][ T2478] Bluetooth: hci4: command 0x0409 tx timeout [ 191.037612][ T6897] team0: Port device team_slave_0 added [ 191.065499][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.072916][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.084445][ T6899] device bridge_slave_0 entered promiscuous mode [ 191.102980][ T6897] team0: Port device team_slave_1 added [ 191.125312][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.133998][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.142540][ T6899] device bridge_slave_1 entered promiscuous mode [ 191.207070][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.214450][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.242049][ T6897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.260530][ T6891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.281131][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.293509][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.303081][ T6955] device bridge_slave_0 entered promiscuous mode [ 191.321281][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.329054][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.356112][ T6897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.383281][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.392798][ T6891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.407526][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.416339][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.425000][ T6955] device bridge_slave_1 entered promiscuous mode [ 191.448398][ T3906] Bluetooth: hci5: command 0x0409 tx timeout [ 191.464792][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.474584][ T6891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.513020][ T6897] device hsr_slave_0 entered promiscuous mode [ 191.524947][ T6897] device hsr_slave_1 entered promiscuous mode [ 191.532789][ T6897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.540831][ T6897] Cannot create hsr debugfs directory [ 191.553749][ T6891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.604370][ T6899] team0: Port device team_slave_0 added [ 191.616058][ T6899] team0: Port device team_slave_1 added [ 191.638608][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.676914][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.684012][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.713802][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.766419][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.786417][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.795572][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.828076][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.880122][ T6895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.920841][ T6955] team0: Port device team_slave_0 added [ 191.927429][ T6895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.964347][ T6895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.983236][ T6955] team0: Port device team_slave_1 added [ 191.999095][ T6899] device hsr_slave_0 entered promiscuous mode [ 192.006116][ T6899] device hsr_slave_1 entered promiscuous mode [ 192.012919][ T6899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.021954][ T6899] Cannot create hsr debugfs directory [ 192.043869][ T6895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.086988][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.094723][ T2478] Bluetooth: hci0: command 0x041b tx timeout [ 192.127145][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.134270][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.162340][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.180860][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.187815][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.214168][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.238138][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.282363][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.291502][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.335134][ T3839] Bluetooth: hci1: command 0x041b tx timeout [ 192.348599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.357298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.367311][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.374611][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.406419][ T6955] device hsr_slave_0 entered promiscuous mode [ 192.413678][ T6955] device hsr_slave_1 entered promiscuous mode [ 192.421954][ T6955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.429791][ T6955] Cannot create hsr debugfs directory [ 192.456900][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.499564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.517974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.527474][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.534645][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.568961][ T3839] Bluetooth: hci2: command 0x041b tx timeout [ 192.599866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.612141][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.654382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.665477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.712265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.721807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.734147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.742864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.753894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.762219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.770836][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.796921][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.808572][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 192.841013][ T6897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.907749][ T6897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.924284][ T6897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.964323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.974824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.988754][ T6897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.051240][ T6899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.058583][ T2478] Bluetooth: hci4: command 0x041b tx timeout [ 193.072460][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.080997][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.093055][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.111233][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.120408][ T6891] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.134334][ T6899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.168951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.177671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.192155][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.199313][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.230183][ T6899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.251224][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.259788][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.267404][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.276433][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.285570][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.295331][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.302463][ T3839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.310522][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.336649][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.361825][ T6899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.403017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.416807][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.426267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.476051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.490235][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.500055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.509138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.517645][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.526626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.536966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.545074][ T3906] Bluetooth: hci5: command 0x041b tx timeout [ 193.577979][ T6891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.594582][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.621461][ T6955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.633308][ T6955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.649293][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.658123][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.666917][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.674052][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.682303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.692103][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.703836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.713151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.722162][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.729307][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.736852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.745968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.754638][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.765637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.773839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.782364][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.799429][ T6893] device veth0_vlan entered promiscuous mode [ 193.806139][ T6955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.836562][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.857404][ T6893] device veth1_vlan entered promiscuous mode [ 193.866670][ T6955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.897688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.913749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.923679][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.945292][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.956472][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.966188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.025111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.038008][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.047016][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.066976][ T6891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.098154][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.106859][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.143026][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.170451][ T3906] Bluetooth: hci0: command 0x040f tx timeout [ 194.176176][ T6893] device veth0_macvtap entered promiscuous mode [ 194.201960][ T6897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.220742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.233641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.270047][ T6893] device veth1_macvtap entered promiscuous mode [ 194.294418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.302861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.311706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.321312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.339496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.347049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.374964][ T6897] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.391871][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.409520][ T3839] Bluetooth: hci1: command 0x040f tx timeout [ 194.415815][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.425032][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.446759][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.483244][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.500732][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.529955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.538484][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.545663][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.555949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.575924][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.593093][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.637745][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.647183][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.656920][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.664066][ T3906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.673564][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.682642][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.692040][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.701033][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.709768][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.719074][ T3906] Bluetooth: hci2: command 0x040f tx timeout [ 194.727998][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.737246][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.748524][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.757839][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.767008][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.776909][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.797416][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.806569][ T6891] device veth0_vlan entered promiscuous mode [ 194.824491][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.833786][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.843865][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.853212][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.862826][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.872056][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.884062][ T6893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.895834][ T6893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.907448][ T8197] Bluetooth: hci3: command 0x040f tx timeout [ 194.914682][ T6893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.925239][ T6893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.944373][ T6891] device veth1_vlan entered promiscuous mode [ 194.960258][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.971432][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.991306][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.000360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.014601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.048031][ T6895] device veth0_vlan entered promiscuous mode [ 195.076238][ T6897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.091605][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.112971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.126538][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.135863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.139750][ T3906] Bluetooth: hci4: command 0x040f tx timeout [ 195.154816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.163211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.172437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.181192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.190657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.200024][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.207069][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.215469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.224465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.233101][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.240253][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.252654][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.283633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.293010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.301073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.309729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.369326][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.378234][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.399145][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.407823][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.420696][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.428107][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.443834][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.454626][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.461762][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.469924][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.478520][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.487111][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.494254][ T3839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.517904][ T6895] device veth1_vlan entered promiscuous mode [ 195.553129][ T6891] device veth0_macvtap entered promiscuous mode [ 195.573004][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.589760][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.609229][ T3906] Bluetooth: hci5: command 0x040f tx timeout [ 195.610396][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.631495][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.643181][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.652681][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.672676][ T6897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.736352][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.754891][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.764190][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.775317][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.784624][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.793902][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.821056][ T6891] device veth1_macvtap entered promiscuous mode [ 195.848293][ T6899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.849481][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.874754][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.886077][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.893512][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.894179][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.913050][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.921652][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.930886][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.940431][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.950135][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.969269][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.977367][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.987571][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.055061][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.066972][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.082328][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.104114][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.113342][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.122241][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.132449][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.141529][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.150501][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.196089][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.207178][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.225279][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.241135][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.248596][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.259180][ T3906] Bluetooth: hci0: command 0x0419 tx timeout [ 196.263528][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.273851][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.282592][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.291215][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.300336][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.308431][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.325605][ T6895] device veth0_macvtap entered promiscuous mode [ 196.340243][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.351950][ T6895] device veth1_macvtap entered promiscuous mode [ 196.380160][ T6891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.393092][ T6891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.406089][ T6891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.415352][ T6891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.427637][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.436354][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.444825][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.454663][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.463714][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.475023][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.489744][ T3906] Bluetooth: hci1: command 0x0419 tx timeout [ 196.502679][ T6897] device veth0_vlan entered promiscuous mode [ 196.516508][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.534073][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.549423][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.578058][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.599205][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.610464][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.621935][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.639296][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.653648][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.665336][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.681745][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.692900][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.704775][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.713338][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.729610][ T3906] Bluetooth: hci2: command 0x0419 tx timeout [ 196.734084][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.744265][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.753588][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.763488][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.794345][ T6897] device veth1_vlan entered promiscuous mode [ 196.812793][ T6895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.836225][ T6895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.849795][ T6895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.862233][ T6895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.935842][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.975818][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.996289][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.005416][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.025008][ T8197] Bluetooth: hci3: command 0x0419 tx timeout [ 197.046115][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 16:09:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 197.210172][ T8197] Bluetooth: hci4: command 0x0419 tx timeout [ 197.222899][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.232538][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 16:09:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 197.307095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.326057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.363519][ T6897] device veth0_macvtap entered promiscuous mode [ 197.374719][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.406974][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.408655][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.436339][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 16:09:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 197.458526][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.494584][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.520660][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.528518][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.553025][ T6897] device veth1_macvtap entered promiscuous mode 16:09:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 197.575783][ T6899] device veth0_vlan entered promiscuous mode [ 197.688166][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.699191][ T3906] Bluetooth: hci5: command 0x0419 tx timeout [ 197.700622][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 16:09:23 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) [ 197.740098][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.770120][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.770874][ T6899] device veth1_vlan entered promiscuous mode [ 197.778124][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.879944][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.901095][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.918790][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.927711][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.951993][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.974099][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.994106][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.004963][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.019019][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.028857][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.048222][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.088938][ C1] hrtimer: interrupt took 38653 ns [ 198.101887][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.122932][ T6955] device veth0_vlan entered promiscuous mode [ 198.140867][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.157467][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.205957][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.243245][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 16:09:24 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x78) [ 198.280421][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.288383][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.298728][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.346012][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.373973][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 16:09:24 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x78) [ 198.393906][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.418117][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.470881][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.503672][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_1 16:09:24 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x78) [ 198.556235][ T6955] device veth1_vlan entered promiscuous mode [ 198.597558][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.669905][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.678285][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.739873][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.761870][ T6897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.778645][ T6897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.839062][ T6897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.847776][ T6897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.898148][ T265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.923947][ T265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.948929][ T6899] device veth0_macvtap entered promiscuous mode [ 199.001634][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.011771][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.023755][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.033216][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.054912][ T6899] device veth1_macvtap entered promiscuous mode 16:09:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/22) [ 199.134766][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.159931][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.169850][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.188163][ T6955] device veth0_macvtap entered promiscuous mode [ 199.256501][ T6955] device veth1_macvtap entered promiscuous mode [ 199.327112][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.328398][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.348022][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.376867][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.398350][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.420814][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.449434][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.467659][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.478609][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.490199][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.503191][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.531190][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.551724][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.565126][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.574526][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.600887][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.617138][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.627845][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.646355][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.658063][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.668216][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.680345][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.690435][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.701768][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.711701][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.722533][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.734019][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.762147][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.779038][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.791063][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.802915][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.813515][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.824013][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.833972][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.844467][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.855718][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.864833][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.873833][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.883040][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.892052][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.902972][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.915513][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.925427][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.937794][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.947816][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.958373][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.968262][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.978775][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.988845][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.999510][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.012427][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.034737][ T6899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.044824][ T6899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.053821][ T6899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.062648][ T6899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.079594][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.088309][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.118474][ T265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.122379][ T6955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.127355][ T265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.146911][ T6955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.160580][ T6955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.176289][ T6955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.195150][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:09:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000ad00)={0x58, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) [ 200.436272][ T265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.452419][ T265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.504773][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.518679][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.526617][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.581862][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.584921][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.595816][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.626318][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.638693][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.673009][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.714931][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:09:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x73) sendmsg(0xffffffffffffffff, 0x0, 0x0) 16:09:27 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008104040d80ecdb4cb92e0c480e000d000000e8bd6efb250309040e000100240d48ff056c05001206", 0x2e}], 0x1}, 0x0) 16:09:27 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 16:09:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/22) 16:09:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000ad00)={0x58, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 16:09:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:09:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000ad00)={0x58, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 16:09:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/22) [ 201.381005][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.392079][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state 16:09:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 201.514146][ T8402] device bridge0 entered promiscuous mode 16:09:27 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 16:09:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r4, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 16:09:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 202.145733][ T8425] ion_buffer_destroy: buffer still mapped in the kernel 16:09:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x73) sendmsg(0xffffffffffffffff, 0x0, 0x0) 16:09:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) socket$inet(0x2, 0x4000000000000001, 0x0) munlockall() 16:09:29 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 16:09:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r4, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 16:09:29 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008104040d80ecdb4cb92e0c480e000d000000e8bd6efb250309040e000100240d48ff056c05001206", 0x2e}], 0x1}, 0x0) 16:09:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x73) sendmsg(0xffffffffffffffff, 0x0, 0x0) 16:09:30 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008104040d80ecdb4cb92e0c480e000d000000e8bd6efb250309040e000100240d48ff056c05001206", 0x2e}], 0x1}, 0x0) 16:09:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r4, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 16:09:30 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008104040d80ecdb4cb92e0c480e000d000000e8bd6efb250309040e000100240d48ff056c05001206", 0x2e}], 0x1}, 0x0) 16:09:31 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 16:09:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r4, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 16:09:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) socket$inet(0x2, 0x4000000000000001, 0x0) munlockall() 16:09:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) socket$inet(0x2, 0x4000000000000001, 0x0) munlockall() 16:09:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r4, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 16:09:32 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 16:09:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r4, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 16:09:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 16:09:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) socket$inet(0x2, 0x4000000000000001, 0x0) munlockall() 16:09:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) socket$inet(0x2, 0x4000000000000001, 0x0) munlockall() 16:09:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x2f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)="287feb72ef461c547f5fb5cb22ab4d9a49eb7fad9e9a0e7dceeeb0071375c601b264a39a61c6c0464b71253c0a1d51be44507fc51ffb7705e046b9fa", 0x3c}, 0x68) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000020ea3d41ddd8c4d5a97b93cf3623ab773a3e57a8f6e46a5b00a0ee266b3bd430289d2a9840caedc6bff514fe443799c479bc07d80881141087128e79eb510d1bb575e6db5b07", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25010000000500040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x2004c0c5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 16:09:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000080)={r4, 0x7000002}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) ppoll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) 16:09:34 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 16:09:34 executing program 4: syz_emit_ethernet(0x74e, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "768750", 0x718, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], "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"}}}}}, 0x0) 16:09:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) socket$inet(0x2, 0x4000000000000001, 0x0) munlockall() 16:09:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x2f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)="287feb72ef461c547f5fb5cb22ab4d9a49eb7fad9e9a0e7dceeeb0071375c601b264a39a61c6c0464b71253c0a1d51be44507fc51ffb7705e046b9fa", 0x3c}, 0x68) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000020ea3d41ddd8c4d5a97b93cf3623ab773a3e57a8f6e46a5b00a0ee266b3bd430289d2a9840caedc6bff514fe443799c479bc07d80881141087128e79eb510d1bb575e6db5b07", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25010000000500040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x2004c0c5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 16:09:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) socket$inet(0x2, 0x4000000000000001, 0x0) munlockall() 16:09:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x20) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 16:09:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x2f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)="287feb72ef461c547f5fb5cb22ab4d9a49eb7fad9e9a0e7dceeeb0071375c601b264a39a61c6c0464b71253c0a1d51be44507fc51ffb7705e046b9fa", 0x3c}, 0x68) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000020ea3d41ddd8c4d5a97b93cf3623ab773a3e57a8f6e46a5b00a0ee266b3bd430289d2a9840caedc6bff514fe443799c479bc07d80881141087128e79eb510d1bb575e6db5b07", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25010000000500040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x2004c0c5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 16:09:36 executing program 4: syz_emit_ethernet(0x74e, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "768750", 0x718, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], "10e20e36007a67079bc090724ba9a8f2fd3d81467b026ec8bbf9cc892469084f8d7f53d63ad862eb66a29e7318e37d9c785dba963859b7865cfeb4df6e53da669d9d8526a6d178fb4fa5206dc98920109a8b822b16addf32444a723972906ed7ee4b9d438349e579cbd7fca022e093ac09070b2aef52d72fe8dee83a0f53cc22ab804cac0cebad4cbfa4240b97daf81d8c25d77df085d8c6b20fc9b30d4ffd6935540008f917ebee504969b6f2a9ab828aca2e1b04c45d75177867eed9b393d4ae30e2b7ac52cff0ad85647bd43b74f8fdbf3bc5a1db118990dc7f4afd3bcf691d41992be1f8542b7974bb1c26fddbca38e07e77ec39e02b0ab889a364548e0932ae80f910b975c43189f5436b99689d8e94bfaf4f93c7c97fe2f1094f126c9148631afbea304389ea8740b301b8cb2a58d07d5725c61c9c7665d7a9785f84b5b10a0d55be2d6d6502e5c4c1f9d9df712c7e05610786fb45de7497787444898cdb21ddd09202da13c52751695d946c395d72839d71931811cd7bfb4cac84cf6887ef3d638be3f4ad670ad1440091a539b33d6ab02f5b768267b2f36bb7abf90cc1f64f4539ea410a7bd022b3a730ad9e8e7773ef807512da03c44777bd9cc3ac466eb0af6bab8e25936f570af8551ac878e92192fa12e2fa9d3b9caf0fad5880f8e29a08f18ab299d23045977dc86f26b1a33e6817532ba42e39cae624a9cc5272e11e4100240f5e55d12d69362e955c29e8561cadcee7385189a49a814ea36c1df713f2f7107bb3400733bad09dafc67ac22096b9aaeafc6addae4ac1cb4890e36fa3544198c990cb2ac646176767a6af3fb6ebba84dc392cfa9ff1e948f9ef543bb505db6f8d96066fe6e2211d3786c95c6858d301ca960d92b176d365e3fab8b049bd75d37e7eb36cef132f2a2048c5418675bc436a51ac1be93f98dbf843d639631182a856c5288720bcf4d8bb9397432165f2181d8554ed09944415089bea2bbaf73866efddb1ff6469585148cdb45198a00143db77047caa675ec578c549c5952d7ea85ea19ec247338907cbe4a6d0608a8dca5064a89ce452e77b32a47ab2ab377f02417bee97efbd90cf2b561da0fc22055d9a27d6bcbf071dca03438d0ca0036e7cbe94bdb60579d5f546a02b59bdb5cd08990b90bf5130f69f07cd0813ee028e0dd6637025f9d4489d95807061e68f8e22c3d34854cd2a9aa57099543039c7a430490ec3213e0a8b51e5888414ea0498a2380d79f77836f48daf7feae4585288168bb51d4d45b22e9e8f3cca36076f839170f5e48b156873b4dfd253d29744a229a86c3670dde318774c24c1dc9a6b987dee3539bfff94007e6596b57514b468cd2ce2aca6576729b14f650e6dc92c8a5078bc59ad4b11ed28b9d0bcf1b42484f6f04282d5c0abf803ff2c02b476c588f42bc653912dfedf83148cdbf5159974ced4cc35ca4f8c839419c01ceea12cad91dc453f350ead59537b72c5cd5068ce94832e962ec7b85d37937c2dae9e9b1550765bd0596614262d763f83c661ae3f7fa26c3bd557cef966c5b870467b0555bab2049c3b0c1d7d14f008628ea3e7b49e8018a476bd045930029a82ab4ce6958c689b9868bcbf582fbd03809706e11514567814adb249d4a45329410b7a11fd7313f593cb98067e772e73ab6d8b49074d213b1faad12cd0db5b8f1109bd52c97f62d566d562c62b1267a05f76e176da2513f4a41fa121b237052ff31dcde7b5336339745e1c2acd0dab0716582a3eff08cf2b2849c17b3b0e707e1242667167ee479c5e6c145986f146d66565c6f86ddfb9534e734e21d79a16acd0fc5b08b2915429b93f5f94a28b3003ecd6e6d9939c6f8e44a49f67fea2202fc45d6e52aba90c87aa4195257ed5fcdd41c3dc1c4374f2141d178df01cf1121d10e351ee7890e44b0820283e4a2b0b406a1c7dfb089735a09b8cf89ceda96b0da95eb1a9444ec557d5647edacf5c738fa622aeba63532126529de191b49fd0e95c3d4dd3eaae1fe73765dea9e8db715b3d300d091fd3d6841b8ca0e0a413f79ed591fd196bcb206a8fedd56cd24174b0bf4bd06282128d25f6a4e0ee18119aebb54a7b7a1812338deb1d5696ae61b7ef134b6f56fe41e98187ba104bc95d49753e1dc7aed070fdb3b73eb134301be1c451a987099a105a7d0d3b4f2dd1d21607b200d15e765b15f3124e084f9f3d31cc21e4b1c4d5de7401cf10a68845f1f03e71b503702a0b59c83b90b58c8fb772dd207982f2489ceb8f5c6bec8e287d02ff91b78865106e3a46a64a166c73307eee12257dc6bd4c5c191558acabd263eb272f0c482a8ce5dc75d5aa3951f0681c30dbf9c77f3ec87c5c859d1ddb1163d9a13d44bec40bd9aff17fb8b108bf2bdf53afbeeb8c538c1b5bbc8e34d70fae94e2a2b93562c4d1d773bf28aa1ef5941c5a2d7878b1b7ece4c5e14cf22e9cd4dbf75b0b3266efebae268db263391dd5141a83bb2b908e6f8b483a9d662a3a018af8fa8e5d6dc911377c4d1fc18ec2f7d0f4e3c967cefbf2ab1c5d896a810f8baaf2ce0ffb5088fde5c1"}}}}}, 0x0) 16:09:36 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xa0040, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 16:09:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x900, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) 16:09:36 executing program 4: syz_emit_ethernet(0x74e, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "768750", 0x718, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], "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"}}}}}, 0x0) 16:09:36 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xa0040, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 16:09:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x2f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)="287feb72ef461c547f5fb5cb22ab4d9a49eb7fad9e9a0e7dceeeb0071375c601b264a39a61c6c0464b71253c0a1d51be44507fc51ffb7705e046b9fa", 0x3c}, 0x68) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000020ea3d41ddd8c4d5a97b93cf3623ab773a3e57a8f6e46a5b00a0ee266b3bd430289d2a9840caedc6bff514fe443799c479bc07d80881141087128e79eb510d1bb575e6db5b07", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25010000000500040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x2004c0c5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000140)=0xde, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 16:09:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x20) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 16:09:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x900, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) 16:09:36 executing program 4: syz_emit_ethernet(0x74e, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "768750", 0x718, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], "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"}}}}}, 0x0) 16:09:36 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xa0040, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 16:09:36 executing program 2: r0 = inotify_init() splice(r0, 0x0, r0, 0x0, 0x1, 0x0) 16:09:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x900, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) 16:09:36 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xa0040, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 16:09:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x20) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 16:09:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 16:09:37 executing program 2: r0 = inotify_init() splice(r0, 0x0, r0, 0x0, 0x1, 0x0) 16:09:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x900, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) 16:09:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0xdd19) accept$inet(r0, 0x0, 0x0) 16:09:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 16:09:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}]}, 0x34}}, 0x0) 16:09:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x20) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 16:09:37 executing program 2: r0 = inotify_init() splice(r0, 0x0, r0, 0x0, 0x1, 0x0) 16:09:37 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 16:09:37 executing program 2: r0 = inotify_init() splice(r0, 0x0, r0, 0x0, 0x1, 0x0) 16:09:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 16:09:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}]}, 0x34}}, 0x0) 16:09:37 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1000387a"]}) 16:09:37 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 16:09:38 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) [ 212.390455][ T7785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 212.640386][ T7785] usb 1-1: Using ep0 maxpacket: 8 16:09:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0xdd19) accept$inet(r0, 0x0, 0x0) 16:09:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}]}, 0x34}}, 0x0) 16:09:38 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 16:09:38 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 16:09:38 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 16:09:38 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 16:09:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}]}, 0x34}}, 0x0) 16:09:38 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 16:09:38 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 212.860715][ T7785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.894790][ T7785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.934655][ T7785] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.974004][ T7785] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 213.020661][ T7785] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 213.075524][ T7785] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 213.280833][ T7785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.304339][ T7785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.350189][ T7785] usb 1-1: Product: syz [ 213.367268][ T7785] usb 1-1: Manufacturer: syz [ 213.385295][ T7785] usb 1-1: SerialNumber: syz [ 213.710627][ T7785] cdc_ncm 1-1:1.0: bind() failure [ 213.737618][ T7785] cdc_ncm 1-1:1.1: bind() failure [ 213.790008][ T7785] usb 1-1: USB disconnect, device number 2 [ 214.450588][ T8197] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.690557][ T8197] usb 1-1: Using ep0 maxpacket: 8 [ 214.890816][ T8197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.901806][ T8197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.913185][ T8197] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.923975][ T8197] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 214.934005][ T8197] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.943972][ T8197] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 16:09:41 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1000387a"]}) 16:09:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b0521a693ebbe0f545f3f04ba5031283803028b3cd73f7356e0ba5c227e348b6a8010f79073b2bf0329097a548b669de419f0b764b9de411a9d80c627c7dac9b24af2476566a6781a05546867967fb6c00eea64b93e598f2a6993b1ea2df25ac116c5815c954916578f63ef5644c1832a1facf1c9d3d692bb37d058e0034b018d6984833d4731b224e18762c21d1f478e87478fab2d4391c6581", 0x9a}, {&(0x7f0000000000)="8cf96e730431", 0x20000006}], 0x2}}], 0x1, 0x0) 16:09:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000040004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c060000000000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 16:09:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cgroup.controllers\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000c9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x126, 0x0, &(0x7f00000004c0)="b95b03b700030000009e40f086dd1fff0600fffff0000b0177fbac141412ec000001c699da153f08e0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400228008000a00a651edad60f7ff7fda58d353b7801abda775716bfe8e1c3228a4d72a4217115971427e74995277c0bcaaa95af2c83496d69d45b1965df479aff9ab07d3f9718ef1581278f2309b569eaea0821929e47cf001132420a5b269d39f1d36f42e5361a9075ac01d3ed904f034d39d5bf3eabbd6e7bb094582edc7306902bb621e825a4385453561748fa2d22e65917ef8152b76c4321c450dcd81f70f579ae7fc9a5e5c073c25857a2afa96c916057544323995f9bd24274b5d0d1fbadc", @ANYRES32=r1], 0x3c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 16:09:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0xdd19) accept$inet(r0, 0x0, 0x0) 16:09:41 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 215.120632][ T8197] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.129703][ T8197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.183762][ T8197] usb 1-1: Product: syz [ 215.200941][ T8197] usb 1-1: Manufacturer: syz [ 215.250791][ T8197] usb 1-1: can't set config #1, error -71 [ 215.311766][ T8197] usb 1-1: USB disconnect, device number 3 [ 215.741735][ T8197] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 215.822294][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.842143][ T8743] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 6 16:09:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000040004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c060000000000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 215.990983][ T8197] usb 1-1: Using ep0 maxpacket: 8 16:09:42 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) socket$netlink(0x10, 0x3, 0x0) 16:09:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0xdd19) accept$inet(r0, 0x0, 0x0) 16:09:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cgroup.controllers\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000c9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400228008000a00a651edad60f7ff7fda58d353b7801abda775716bfe8e1c3228a4d72a4217115971427e74995277c0bcaaa95af2c83496d69d45b1965df479aff9ab07d3f9718ef1581278f2309b569eaea0821929e47cf001132420a5b269d39f1d36f42e5361a9075ac01d3ed904f034d39d5bf3eabbd6e7bb094582edc7306902bb621e825a4385453561748fa2d22e65917ef8152b76c4321c450dcd81f70f579ae7fc9a5e5c073c25857a2afa96c916057544323995f9bd24274b5d0d1fbadc", @ANYRES32=r1], 0x3c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) [ 216.191391][ T8197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.218880][ T8197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.271072][ T8197] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.317021][ T8197] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 216.357712][ T8197] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.368295][ T8197] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 16:09:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0) [ 216.531109][ T8197] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.552253][ T8197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.566665][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.606713][ T8770] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 6 [ 216.612164][ T8197] usb 1-1: Product: syz [ 216.639899][ T8197] usb 1-1: Manufacturer: syz 16:09:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cgroup.controllers\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000c9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x126, 0x0, &(0x7f00000004c0)="b95b03b700030000009e40f086dd1fff0600fffff0000b0177fbac141412ec000001c699da153f08e0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400228008000a00a651edad60f7ff7fda58d353b7801abda775716bfe8e1c3228a4d72a4217115971427e74995277c0bcaaa95af2c83496d69d45b1965df479aff9ab07d3f9718ef1581278f2309b569eaea0821929e47cf001132420a5b269d39f1d36f42e5361a9075ac01d3ed904f034d39d5bf3eabbd6e7bb094582edc7306902bb621e825a4385453561748fa2d22e65917ef8152b76c4321c450dcd81f70f579ae7fc9a5e5c073c25857a2afa96c916057544323995f9bd24274b5d0d1fbadc", @ANYRES32=r1], 0x3c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) [ 216.685620][ T8197] usb 1-1: SerialNumber: syz [ 217.051063][ T8197] cdc_ncm 1-1:1.0: bind() failure [ 217.084267][ T8197] cdc_ncm 1-1:1.1: bind() failure [ 217.127187][ T8197] usb 1-1: USB disconnect, device number 4 16:09:43 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1000387a"]}) 16:09:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0) 16:09:43 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) socket$netlink(0x10, 0x3, 0x0) 16:09:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:09:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000040004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c060000000000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 16:09:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cgroup.controllers\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000c9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400228008000a00a651edad60f7ff7fda58d353b7801abda775716bfe8e1c3228a4d72a4217115971427e74995277c0bcaaa95af2c83496d69d45b1965df479aff9ab07d3f9718ef1581278f2309b569eaea0821929e47cf001132420a5b269d39f1d36f42e5361a9075ac01d3ed904f034d39d5bf3eabbd6e7bb094582edc7306902bb621e825a4385453561748fa2d22e65917ef8152b76c4321c450dcd81f70f579ae7fc9a5e5c073c25857a2afa96c916057544323995f9bd24274b5d0d1fbadc", @ANYRES32=r1], 0x3c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 16:09:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0) [ 217.860586][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.893187][ T8823] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 6 [ 217.930680][ T2478] usb 1-1: new high-speed USB device number 5 using dummy_hcd 16:09:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:09:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0) 16:09:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 218.200354][ T2478] usb 1-1: Using ep0 maxpacket: 8 16:09:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:09:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 218.409861][ T2478] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.442180][ T2478] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.526110][ T2478] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.565219][ T2478] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 218.588260][ T2478] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.611302][ T2478] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 218.808396][ T2478] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.823513][ T2478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.850170][ T2478] usb 1-1: Product: syz [ 218.871177][ T2478] usb 1-1: Manufacturer: syz [ 218.882502][ T2478] usb 1-1: SerialNumber: syz [ 219.189948][ T2478] cdc_ncm 1-1:1.0: bind() failure [ 219.198480][ T2478] cdc_ncm 1-1:1.1: bind() failure [ 219.220567][ T2478] usb 1-1: USB disconnect, device number 5 16:09:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000040004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c060000000000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 16:09:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:09:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) 16:09:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:09:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:09:45 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1000387a"]}) 16:09:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:09:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 219.865585][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.931321][ T8886] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 6 [ 220.109457][ T8197] usb 1-1: new high-speed USB device number 6 using dummy_hcd 16:09:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) 16:09:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x4c, 0x274, 0x0, 0x0, 0x2a8, 0x318, 0x318, 0x2a8, 0x318, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'veth0_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@mcast1, @mcast2, [], [], 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sshd_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 220.347810][ T8901] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.356604][ T8197] usb 1-1: Using ep0 maxpacket: 8 16:09:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) [ 220.559737][ T8197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.605103][ T8197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 16:09:46 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) [ 220.684595][ T8197] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 16:09:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:09:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) [ 220.738555][ T8197] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 220.777975][ T8197] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 16:09:46 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) [ 220.841760][ T8197] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 16:09:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 220.959055][ C0] [ 220.961409][ C0] ================================ [ 220.966535][ C0] WARNING: inconsistent lock state [ 220.971635][ C0] 5.9.0-rc8-next-20201008-syzkaller #0 Not tainted [ 220.978119][ C0] -------------------------------- [ 220.983220][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 220.990059][ C0] syz-executor.3/8922 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 220.996718][ C0] ffff88801ca47e18 (&xa->xa_lock#8){+.?.}-{2:2}, at: xa_destroy+0xaa/0x350 [ 221.005340][ C0] {SOFTIRQ-ON-W} state was registered at: [ 221.011065][ C0] lock_acquire+0x1f2/0xaa0 [ 221.015652][ C0] _raw_spin_lock+0x2a/0x40 [ 221.020242][ C0] io_uring_add_task_file+0x207/0x430 [ 221.025692][ C0] io_uring_setup+0x2727/0x3660 [ 221.030655][ C0] do_syscall_64+0x2d/0x70 [ 221.035155][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 221.041120][ C0] irq event stamp: 175 [ 221.045201][ C0] hardirqs last enabled at (174): [] _raw_spin_unlock_irqrestore+0x6f/0x90 [ 221.050707][ T8197] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.055441][ C0] hardirqs last disabled at (175): [] _raw_spin_lock_irqsave+0xa9/0xd0 [ 221.074219][ C0] softirqs last enabled at (98): [] sock_setsockopt+0x20e/0x26b0 [ 221.077820][ T8197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.083595][ C0] softirqs last disabled at (145): [] asm_call_irq_on_stack+0xf/0x20 [ 221.083601][ C0] [ 221.083601][ C0] other info that might help us debug this: [ 221.083605][ C0] Possible unsafe locking scenario: [ 221.083605][ C0] [ 221.083608][ C0] CPU0 [ 221.083611][ C0] ---- [ 221.083614][ C0] lock(&xa->xa_lock#8); [ 221.083630][ C0] [ 221.083633][ C0] lock(&xa->xa_lock#8); [ 221.083646][ C0] [ 221.083646][ C0] *** DEADLOCK *** [ 221.083646][ C0] [ 221.083653][ C0] 3 locks held by syz-executor.3/8922: [ 221.083657][ C0] #0: ffff888017cce6d8 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0xabe/0x2b50 [ 221.083708][ C0] #1: [ 221.125735][ T8197] usb 1-1: Product: syz [ 221.127660][ C0] ffffffff8a554da0 (rcu_read_lock){....}-{1:2}, at: lock_page_memcg+0x30/0x260 [ 221.127708][ C0] #2: [ 221.152505][ T8197] usb 1-1: Manufacturer: syz [ 221.159278][ C0] ffffffff8a554c80 (rcu_callback){....}-{0:0}, at: rcu_core+0x5d8/0x1240 [ 221.159317][ C0] [ 221.159317][ C0] stack backtrace: [ 221.159332][ C0] CPU: 0 PID: 8922 Comm: syz-executor.3 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 221.159339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.159343][ C0] Call Trace: [ 221.159349][ C0] [ 221.159363][ C0] dump_stack+0x198/0x1fb [ 221.159379][ C0] mark_lock.cold+0x32/0x74 [ 221.159401][ C0] ? lock_chain_count+0x20/0x20 [ 221.187795][ T8197] usb 1-1: SerialNumber: syz [ 221.190903][ C0] ? mark_lock+0xf7/0x2420 [ 221.190918][ C0] ? lock_chain_count+0x20/0x20 [ 221.190931][ C0] ? kernel_text_address+0xbd/0xf0 [ 221.190943][ C0] ? __kernel_text_address+0x9/0x30 16:09:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) [ 221.190956][ C0] ? unwind_get_return_address+0x51/0x90 [ 221.190975][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 221.190996][ C0] __lock_acquire+0x118a/0x56d0 [ 221.276061][ C0] ? lock_chain_count+0x20/0x20 [ 221.280940][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 221.286926][ C0] lock_acquire+0x1f2/0xaa0 [ 221.291435][ C0] ? xa_destroy+0xaa/0x350 [ 221.295846][ C0] ? lock_release+0x890/0x890 [ 221.300523][ C0] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 221.305892][ C0] _raw_spin_lock_irqsave+0x94/0xd0 [ 221.311090][ C0] ? xa_destroy+0xaa/0x350 [ 221.315502][ C0] xa_destroy+0xaa/0x350 [ 221.319740][ C0] ? xas_pause+0x3b0/0x3b0 [ 221.324154][ C0] ? lock_acquire+0x1f2/0xaa0 [ 221.328834][ C0] ? lock_release+0x890/0x890 [ 221.333512][ C0] ? free_obj_work+0x5b0/0x5b0 [ 221.338302][ C0] __io_uring_free+0x60/0xc0 [ 221.342889][ C0] __put_task_struct+0xff/0x3f0 [ 221.347739][ C0] delayed_put_task_struct+0x1f6/0x340 [ 221.353204][ C0] rcu_core+0x645/0x1240 [ 221.357450][ C0] ? rcu_gp_kthread+0x1ca0/0x1ca0 [ 221.362473][ C0] ? mark_held_locks+0x9f/0xe0 [ 221.367234][ C0] ? hrtimer_interrupt+0x6f4/0x940 [ 221.372438][ C0] ? lock_is_held_type+0xbb/0xf0 [ 221.377374][ C0] __do_softirq+0x203/0xab6 [ 221.381877][ C0] asm_call_irq_on_stack+0xf/0x20 [ 221.386886][ C0] [ 221.389828][ C0] do_softirq_own_stack+0x9b/0xd0 [ 221.394849][ C0] irq_exit_rcu+0x235/0x280 [ 221.399354][ C0] sysvec_apic_timer_interrupt+0x51/0xf0 [ 221.404986][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 221.410976][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60 [ 221.417036][ C0] Code: 5d be 03 00 00 00 e9 b6 98 47 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 48 8b 14 25 c0 fe 01 00 <65> 8b 05 90 a3 8c 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 [ 221.436634][ C0] RSP: 0018:ffffc9000185f738 EFLAGS: 00000246 [ 221.442713][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81abf072 [ 221.450680][ C0] RDX: ffff88802554c080 RSI: ffff88802554c080 RDI: 0000000000000001 [ 221.458647][ C0] RBP: ffffea0000b4d0c0 R08: 0000000000000001 R09: ffffea0000b4d0f3 [ 221.466621][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0000b4d0c8 [ 221.474586][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffea0000b43f08 [ 221.482567][ C0] ? page_remove_rmap+0x912/0x1c00 [ 221.487681][ C0] page_remove_rmap+0xe2/0x1c00 [ 221.492530][ C0] ? mark_page_accessed+0x273/0x1bd0 [ 221.497815][ C0] unmap_page_range+0xfa5/0x2b50 [ 221.502755][ C0] ? unmap_vmas+0x126/0x2e0 [ 221.507258][ C0] ? vm_normal_page_pmd+0x5b0/0x5b0 [ 221.509060][ T8197] cdc_ncm 1-1:1.0: bind() failure [ 221.512447][ C0] ? lock_downgrade+0x830/0x830 [ 221.512460][ C0] ? uprobe_munmap+0x1c/0x560 [ 221.512473][ C0] unmap_single_vma+0x198/0x300 [ 221.512494][ C0] unmap_vmas+0x168/0x2e0 [ 221.533020][ T8197] cdc_ncm 1-1:1.1: bind() failure [ 221.536131][ C0] ? zap_vma_ptes+0x100/0x100 [ 221.536149][ C0] exit_mmap+0x2b1/0x530 [ 221.536170][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 221.556015][ C0] ? check_preemption_disabled+0x50/0x130 [ 221.561740][ C0] ? kmem_cache_free.part.0+0x19f/0x1d0 [ 221.567285][ C0] ? __khugepaged_exit+0x2d9/0x3f0 [ 221.572397][ C0] __mmput+0x122/0x470 [ 221.576492][ C0] mmput+0x53/0x60 [ 221.577725][ T8197] usb 1-1: USB disconnect, device number 6 [ 221.580206][ C0] do_exit+0xa31/0x2930 [ 221.580224][ C0] ? lock_is_held_type+0xbb/0xf0 [ 221.580238][ C0] ? find_held_lock+0x2d/0x110 [ 221.580250][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 221.580264][ C0] ? lock_downgrade+0x830/0x830 [ 221.580286][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 221.615071][ C0] ? lock_is_held_type+0xbb/0xf0 [ 221.620013][ C0] do_group_exit+0x125/0x310 [ 221.624600][ C0] get_signal+0x428/0x1f00 [ 221.629017][ C0] arch_do_signal+0x82/0x2470 [ 221.633693][ C0] ? _copy_to_user+0xdc/0x150 [ 221.638368][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 221.643735][ C0] ? __x64_sys_futex+0x378/0x4e0 [ 221.648665][ C0] ? __x64_sys_futex+0x382/0x4e0 [ 221.653598][ C0] ? do_futex+0x1a30/0x1a30 [ 221.658106][ C0] ? check_preemption_disabled+0x50/0x130 [ 221.663827][ C0] exit_to_user_mode_prepare+0x194/0x1f0 [ 221.669479][ C0] syscall_exit_to_user_mode+0x7a/0x2c0 [ 221.675806][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 221.681710][ C0] RIP: 0033:0x45de29 [ 221.685586][ C0] Code: Unable to access opcode bytes at RIP 0x45ddff. [ 221.692416][ C0] RSP: 002b:00007f0bb66b7cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 221.700819][ C0] RAX: fffffffffffffe00 RBX: 000000000118bf28 RCX: 000000000045de29 [ 221.708777][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000118bf28 [ 221.716735][ C0] RBP: 000000000118bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.724689][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 221.732645][ C0] R13: 00007fffd02c1b5f R14: 00007f0bb66b89c0 R15: 000000000118bf2c 16:09:48 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) 16:09:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:09:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:09:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) dup2(r1, r2) 16:09:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x4c, 0x274, 0x0, 0x0, 0x2a8, 0x318, 0x318, 0x2a8, 0x318, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'veth0_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@mcast1, @mcast2, [], [], 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sshd_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 16:09:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:49 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) 16:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) dup2(r1, r2) 16:09:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:49 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 16:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) dup2(r1, r2) [ 223.362572][ T8991] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' 16:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2a, 0x2, 0x0) dup2(r1, r2) 16:09:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:49 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 16:09:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 16:09:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x4c, 0x274, 0x0, 0x0, 0x2a8, 0x318, 0x318, 0x2a8, 0x318, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'veth0_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@mcast1, @mcast2, [], [], 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sshd_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 16:09:52 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 16:09:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 16:09:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:52 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) [ 226.478745][ T9038] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' 16:09:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 16:09:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 16:09:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 16:09:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) 16:09:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 16:09:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x4c, 0x274, 0x0, 0x0, 0x2a8, 0x318, 0x318, 0x2a8, 0x318, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'veth0_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@mcast1, @mcast2, [], [], 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sshd_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 16:09:55 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x311000) accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3f, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x90011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x6, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x50) r3 = inotify_init() openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x40, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="46bd4615beea00af8f11965d7a454c05e2c2e2a463017823e0e91cfb42d09613fec79a8e9c722a376b8a3b09fe75e8b5553c070da72448db2c124b45c28e7127a9627d7b75087eb5a95cc23fde322ad1145b7b7e580e1e1860e7f762af0383d75c7c2554710ff28db55aa5823f402861e3974b7ff114550438a1b49867a9dd461f198e453406566252055b16bad391d8bfc8db518ca340f432aad811c8852a256792d497db20515825f7dd287c323bb5867bb9", 0xb3}, {&(0x7f00000000c0)="8b7e28b512feb3824b0dcb841a220d459e016c23ee4d968b2cc30ff7e658c2c170d0b0a905e9ce96cf654a80c4dc35", 0x2f}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x4040804}, {&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x8000}, {&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="72c66e86434c20", 0x7}, {&(0x7f0000000b80)="75439af5e135be3e5d5ab2ab96c99d3c466a77d26c", 0x15}], 0x2, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48}, {0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d40)="06d7807780f9a66c978ab36054f7c8e7e10703f8993b427792a3077732357edf", 0x20}, {0x0}, {&(0x7f0000000f40)}, {&(0x7f0000001000)="34c851ac7707faa22b3f4bf35bfcbafc14da26fc2896004cfa8fb5f484a624cd7e224691a90015d4606208e99d7293ecec5c4dc1549ce3057cb12da4ef590050c2999843f7e72f60ec5d65459e1aec1e98858c44f0e93d41c3578d9d9870c498ba8148f91e6d9aef1a828e35e0ee9dd7dcb988db57b5d18efa0649acf322cfcd2cf2f1bb716e7c41b198aa950ac0073480569c3e03eddfa18eaaa00c5543974e592056b5781a7b0a", 0xa8}, {&(0x7f00000010c0)="707ed571edf6e750b05a8b09c88e52dd35713650ae8277fb8232637a8f11587759fe258c4f645d91621c8158e900a1267e232608eaa3462ecdc00a52c4624c19ab4f4889f02fbc60540602bedf2c96b512d5b10e182ba395e0ba64064b50acc5c47a79a6a68ea91687289ae89dc5a28959bef5aa649e00dc3945a254e0c4090be1ff4c6212ab201edf30af8a3cbf95b09e49a6b15e110d6dc182ff172690a45eac0445d850769d", 0xa7}, {&(0x7f0000001180)="37ea7fa2885b", 0x6}], 0x6, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88, 0x4000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001600)="6bd4fbe687bceca4367e9d8f0a43e82ad994a532aa1af34a1bf8ecd07c082190487c32475607d5a9eefdb4f695ec1308d4a45f78ad245ad5b5242b3acf4289cc56e36ed6c1b60c07ec62fe55c80e7d543c58b1c902a28e296f5383f6670b2d513a68e7b27e7d6ca6df45112ab8fefdffb8e68b79c6", 0x75}, {&(0x7f0000001700)="7656430dade32fbede107901a9aacd321d1204b77cd89003c71052e0e89add67629164aa7b0af88e2b9541d6db31880c574c7e120a15f607", 0x38}], 0x2, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x40}, {&(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x20}], 0x6, 0x10) 16:09:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x5c) 16:09:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 16:09:55 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x200, 0x0) write$P9_RRENAMEAT(r6, &(0x7f0000000440)={0x7}, 0x7) 16:09:55 executing program 4: clone(0x2000200cdfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x7, 0x1, '$(\x00'}]}, 0x1c}}, 0x0) 16:09:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x5c) 16:09:55 executing program 4: clone(0x2000200cdfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x7, 0x1, '$(\x00'}]}, 0x1c}}, 0x0) 16:09:55 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x200, 0x0) write$P9_RRENAMEAT(r6, &(0x7f0000000440)={0x7}, 0x7) [ 229.551852][ T9081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' 16:09:55 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x311000) accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3f, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x90011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x6, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x50) r3 = inotify_init() openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x40, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="46bd4615beea00af8f11965d7a454c05e2c2e2a463017823e0e91cfb42d09613fec79a8e9c722a376b8a3b09fe75e8b5553c070da72448db2c124b45c28e7127a9627d7b75087eb5a95cc23fde322ad1145b7b7e580e1e1860e7f762af0383d75c7c2554710ff28db55aa5823f402861e3974b7ff114550438a1b49867a9dd461f198e453406566252055b16bad391d8bfc8db518ca340f432aad811c8852a256792d497db20515825f7dd287c323bb5867bb9", 0xb3}, {&(0x7f00000000c0)="8b7e28b512feb3824b0dcb841a220d459e016c23ee4d968b2cc30ff7e658c2c170d0b0a905e9ce96cf654a80c4dc35", 0x2f}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x4040804}, {&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x8000}, {&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="72c66e86434c20", 0x7}, {&(0x7f0000000b80)="75439af5e135be3e5d5ab2ab96c99d3c466a77d26c", 0x15}], 0x2, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48}, {0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d40)="06d7807780f9a66c978ab36054f7c8e7e10703f8993b427792a3077732357edf", 0x20}, {0x0}, {&(0x7f0000000f40)}, {&(0x7f0000001000)="34c851ac7707faa22b3f4bf35bfcbafc14da26fc2896004cfa8fb5f484a624cd7e224691a90015d4606208e99d7293ecec5c4dc1549ce3057cb12da4ef590050c2999843f7e72f60ec5d65459e1aec1e98858c44f0e93d41c3578d9d9870c498ba8148f91e6d9aef1a828e35e0ee9dd7dcb988db57b5d18efa0649acf322cfcd2cf2f1bb716e7c41b198aa950ac0073480569c3e03eddfa18eaaa00c5543974e592056b5781a7b0a", 0xa8}, {&(0x7f00000010c0)="707ed571edf6e750b05a8b09c88e52dd35713650ae8277fb8232637a8f11587759fe258c4f645d91621c8158e900a1267e232608eaa3462ecdc00a52c4624c19ab4f4889f02fbc60540602bedf2c96b512d5b10e182ba395e0ba64064b50acc5c47a79a6a68ea91687289ae89dc5a28959bef5aa649e00dc3945a254e0c4090be1ff4c6212ab201edf30af8a3cbf95b09e49a6b15e110d6dc182ff172690a45eac0445d850769d", 0xa7}, {&(0x7f0000001180)="37ea7fa2885b", 0x6}], 0x6, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88, 0x4000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001600)="6bd4fbe687bceca4367e9d8f0a43e82ad994a532aa1af34a1bf8ecd07c082190487c32475607d5a9eefdb4f695ec1308d4a45f78ad245ad5b5242b3acf4289cc56e36ed6c1b60c07ec62fe55c80e7d543c58b1c902a28e296f5383f6670b2d513a68e7b27e7d6ca6df45112ab8fefdffb8e68b79c6", 0x75}, {&(0x7f0000001700)="7656430dade32fbede107901a9aacd321d1204b77cd89003c71052e0e89add67629164aa7b0af88e2b9541d6db31880c574c7e120a15f607", 0x38}], 0x2, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x40}, {&(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x20}], 0x6, 0x10) 16:09:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x5c) 16:09:55 executing program 4: clone(0x2000200cdfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x7, 0x1, '$(\x00'}]}, 0x1c}}, 0x0)